@shipfox/api-integration-core 2.0.0

package/dist/providers/github.js

@@ -0,0 +1,109 @@
+import { slugifyConnectionSlug } from '@shipfox/api-integration-core-dto';
+import { config } from '#config.js';
+import { getIntegrationConnectionById, resolveUniqueConnectionSlug, upsertIntegrationConnection } from '#db/connections.js';
+import { db } from '#db/db.js';
+import { publishIntegrationEventReceived, publishSourcePush, recordDeliveryOnly } from '#db/webhook-deliveries.js';
+import { retryConnectionSlugCollision } from '#providers/connection-slug.js';
+// Stable migration-tracking table name for the GitHub provider database. This
+// must NOT depend on the provider's position in the module `database` array. A
+// positional name would shift if a provider is flag-disabled and silently
+// re-run migrations against existing tables.
+const GITHUB_MIGRATIONS_TABLE = '__drizzle_migrations_integrations_github';
+async function loadGithubModuleParts(options = {}) {
+    const { createGithubInstallationTokenProvider, createGithubE2eRoutes, encodeInstallationTokenEnvelope, createGithubIntegrationProvider, getGithubInstallationByInstallationId, githubInstallationTokenNamespace, db: githubDb, migrationsPath: githubMigrationsPath, upsertGithubInstallation } = await import('@shipfox/api-integration-github');
+    const tokenProvider = createGithubInstallationTokenProvider({
+        getIntegrationConnectionById,
+        secretStore: options.secrets?.github ? {
+            read: async (workspaceId, installationId)=>await options.secrets?.github?.getSecret({
+                    workspaceId,
+                    namespace: githubInstallationTokenNamespace(installationId),
+                    key: 'envelope'
+                }) ?? null,
+            write: async (workspaceId, installationId, envelope)=>{
+                await options.secrets?.github?.setSecrets({
+                    workspaceId,
+                    namespace: githubInstallationTokenNamespace(installationId),
+                    values: {
+                        envelope: encodeInstallationTokenEnvelope(envelope)
+                    }
+                });
+            }
+        } : undefined
+    });
+    async function getExistingGithubConnection(input) {
+        const installation = await getGithubInstallationByInstallationId(input.installationId);
+        if (!installation) return undefined;
+        const connection = await getIntegrationConnectionById(installation.connectionId);
+        if (!connection) return undefined;
+        return connection;
+    }
+    async function connectGithubInstallation(input) {
+        return await retryConnectionSlugCollision(()=>db().transaction(async (tx)=>{
+                const baseSlug = slugifyConnectionSlug(`github_${input.installation.accountLogin}`, {
+                    fallback: 'github'
+                });
+                const slug = await resolveUniqueConnectionSlug({
+                    workspaceId: input.workspaceId,
+                    provider: 'github',
+                    externalAccountId: input.installationId,
+                    baseSlug
+                }, {
+                    tx
+                });
+                const connection = await upsertIntegrationConnection({
+                    workspaceId: input.workspaceId,
+                    provider: 'github',
+                    externalAccountId: input.installationId,
+                    slug,
+                    displayName: input.displayName,
+                    lifecycleStatus: 'active'
+                }, {
+                    tx
+                });
+                await upsertGithubInstallation({
+                    connectionId: connection.id,
+                    ...input.installation
+                }, {
+                    tx
+                });
+                return connection;
+            }));
+    }
+    return {
+        provider: createGithubIntegrationProvider({
+            getExistingGithubConnection,
+            connectGithubInstallation,
+            publishIntegrationEventReceived,
+            publishSourcePush,
+            recordDeliveryOnly,
+            getIntegrationConnectionById,
+            coreDb: db,
+            deleteSecrets: options.secrets?.deleteSecrets,
+            agentTools: {
+                tokenProvider
+            }
+        }),
+        e2eRoutes: [
+            createGithubE2eRoutes({
+                getExistingGithubConnection,
+                connectGithubInstallation,
+                connectionCapabilities: [
+                    'source_control',
+                    'agent_tools'
+                ]
+            })
+        ],
+        database: {
+            db: githubDb,
+            migrationsPath: githubMigrationsPath,
+            migrationsTableName: GITHUB_MIGRATIONS_TABLE
+        }
+    };
+}
+export const githubProviderModule = {
+    id: 'github',
+    enabled: config.INTEGRATIONS_ENABLE_GITHUB_PROVIDER,
+    load: loadGithubModuleParts
+};
+
+//# sourceMappingURL=github.js.map

package/dist/providers/github.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/providers/github.ts"],"sourcesContent":["import {\n  type IntegrationConnection as CoreIntegrationConnection,\n  slugifyConnectionSlug,\n} from '@shipfox/api-integration-core-dto';\nimport type {ConnectGithubInstallationInput} from '@shipfox/api-integration-github';\nimport {config} from '#config.js';\nimport {\n  getIntegrationConnectionById,\n  resolveUniqueConnectionSlug,\n  upsertIntegrationConnection,\n} from '#db/connections.js';\nimport {db} from '#db/db.js';\nimport {\n  publishIntegrationEventReceived,\n  publishSourcePush,\n  recordDeliveryOnly,\n} from '#db/webhook-deliveries.js';\nimport {retryConnectionSlugCollision} from '#providers/connection-slug.js';\nimport type {\n  IntegrationModuleParts,\n  IntegrationProviderModule,\n  IntegrationProviderModuleLoadOptions,\n} from '#providers/types.js';\n\n// Stable migration-tracking table name for the GitHub provider database. This\n// must NOT depend on the provider's position in the module `database` array. A\n// positional name would shift if a provider is flag-disabled and silently\n// re-run migrations against existing tables.\nconst GITHUB_MIGRATIONS_TABLE = '__drizzle_migrations_integrations_github';\n\nasync function loadGithubModuleParts(\n  options: IntegrationProviderModuleLoadOptions = {},\n): Promise<IntegrationModuleParts> {\n  const {\n    createGithubInstallationTokenProvider,\n    createGithubE2eRoutes,\n    encodeInstallationTokenEnvelope,\n    createGithubIntegrationProvider,\n    getGithubInstallationByInstallationId,\n    githubInstallationTokenNamespace,\n    db: githubDb,\n    migrationsPath: githubMigrationsPath,\n    upsertGithubInstallation,\n  } = await import('@shipfox/api-integration-github');\n\n  const tokenProvider = createGithubInstallationTokenProvider({\n    getIntegrationConnectionById,\n    secretStore: options.secrets?.github\n      ? {\n          read: async (workspaceId, installationId) =>\n            (await options.secrets?.github?.getSecret({\n              workspaceId,\n              namespace: githubInstallationTokenNamespace(installationId),\n              key: 'envelope',\n            })) ?? null,\n          write: async (workspaceId, installationId, envelope) => {\n            await options.secrets?.github?.setSecrets({\n              workspaceId,\n              namespace: githubInstallationTokenNamespace(installationId),\n              values: {envelope: encodeInstallationTokenEnvelope(envelope)},\n            });\n          },\n        }\n      : undefined,\n  });\n\n  async function getExistingGithubConnection(input: {\n    installationId: string;\n  }): Promise<CoreIntegrationConnection<'github'> | undefined> {\n    const installation = await getGithubInstallationByInstallationId(input.installationId);\n    if (!installation) return undefined;\n    const connection = await getIntegrationConnectionById(installation.connectionId);\n    if (!connection) return undefined;\n    return connection as CoreIntegrationConnection<'github'>;\n  }\n\n  async function connectGithubInstallation(\n    input: ConnectGithubInstallationInput,\n  ): Promise<CoreIntegrationConnection<'github'>> {\n    return await retryConnectionSlugCollision(() =>\n      db().transaction(async (tx) => {\n        const baseSlug = slugifyConnectionSlug(`github_${input.installation.accountLogin}`, {\n          fallback: 'github',\n        });\n        const slug = await resolveUniqueConnectionSlug(\n          {\n            workspaceId: input.workspaceId,\n            provider: 'github',\n            externalAccountId: input.installationId,\n            baseSlug,\n          },\n          {tx},\n        );\n        const connection = await upsertIntegrationConnection(\n          {\n            workspaceId: input.workspaceId,\n            provider: 'github',\n            externalAccountId: input.installationId,\n            slug,\n            displayName: input.displayName,\n            lifecycleStatus: 'active',\n          },\n          {tx},\n        );\n\n        await upsertGithubInstallation(\n          {\n            connectionId: connection.id,\n            ...input.installation,\n          },\n          {tx},\n        );\n\n        return connection as CoreIntegrationConnection<'github'>;\n      }),\n    );\n  }\n\n  return {\n    provider: createGithubIntegrationProvider({\n      getExistingGithubConnection,\n      connectGithubInstallation,\n      publishIntegrationEventReceived,\n      publishSourcePush,\n      recordDeliveryOnly,\n      getIntegrationConnectionById,\n      coreDb: db,\n      deleteSecrets: options.secrets?.deleteSecrets,\n      agentTools: {tokenProvider},\n    }),\n    e2eRoutes: [\n      createGithubE2eRoutes({\n        getExistingGithubConnection,\n        connectGithubInstallation,\n        connectionCapabilities: ['source_control', 'agent_tools'],\n      }),\n    ],\n    database: {\n      db: githubDb,\n      migrationsPath: githubMigrationsPath,\n      migrationsTableName: GITHUB_MIGRATIONS_TABLE,\n    },\n  };\n}\n\nexport const githubProviderModule: IntegrationProviderModule = {\n  id: 'github',\n  enabled: config.INTEGRATIONS_ENABLE_GITHUB_PROVIDER,\n  load: loadGithubModuleParts,\n};\n"],"names":["slugifyConnectionSlug","config","getIntegrationConnectionById","resolveUniqueConnectionSlug","upsertIntegrationConnection","db","publishIntegrationEventReceived","publishSourcePush","recordDeliveryOnly","retryConnectionSlugCollision","GITHUB_MIGRATIONS_TABLE","loadGithubModuleParts","options","createGithubInstallationTokenProvider","createGithubE2eRoutes","encodeInstallationTokenEnvelope","createGithubIntegrationProvider","getGithubInstallationByInstallationId","githubInstallationTokenNamespace","githubDb","migrationsPath","githubMigrationsPath","upsertGithubInstallation","tokenProvider","secretStore","secrets","github","read","workspaceId","installationId","getSecret","namespace","key","write","envelope","setSecrets","values","undefined","getExistingGithubConnection","input","installation","connection","connectionId","connectGithubInstallation","transaction","tx","baseSlug","accountLogin","fallback","slug","provider","externalAccountId","displayName","lifecycleStatus","id","coreDb","deleteSecrets","agentTools","e2eRoutes","connectionCapabilities","database","migrationsTableName","githubProviderModule","enabled","INTEGRATIONS_ENABLE_GITHUB_PROVIDER","load"],"mappings":"AAAA,SAEEA,qBAAqB,QAChB,oCAAoC;AAE3C,SAAQC,MAAM,QAAO,aAAa;AAClC,SACEC,4BAA4B,EAC5BC,2BAA2B,EAC3BC,2BAA2B,QACtB,qBAAqB;AAC5B,SAAQC,EAAE,QAAO,YAAY;AAC7B,SACEC,+BAA+B,EAC/BC,iBAAiB,EACjBC,kBAAkB,QACb,4BAA4B;AACnC,SAAQC,4BAA4B,QAAO,gCAAgC;AAO3E,8EAA8E;AAC9E,+EAA+E;AAC/E,0EAA0E;AAC1E,6CAA6C;AAC7C,MAAMC,0BAA0B;AAEhC,eAAeC,sBACbC,UAAgD,CAAC,CAAC;IAElD,MAAM,EACJC,qCAAqC,EACrCC,qBAAqB,EACrBC,+BAA+B,EAC/BC,+BAA+B,EAC/BC,qCAAqC,EACrCC,gCAAgC,EAChCb,IAAIc,QAAQ,EACZC,gBAAgBC,oBAAoB,EACpCC,wBAAwB,EACzB,GAAG,MAAM,MAAM,CAAC;IAEjB,MAAMC,gBAAgBV,sCAAsC;QAC1DX;QACAsB,aAAaZ,QAAQa,OAAO,EAAEC,SAC1B;YACEC,MAAM,OAAOC,aAAaC,iBACxB,AAAC,MAAMjB,QAAQa,OAAO,EAAEC,QAAQI,UAAU;oBACxCF;oBACAG,WAAWb,iCAAiCW;oBAC5CG,KAAK;gBACP,MAAO;YACTC,OAAO,OAAOL,aAAaC,gBAAgBK;gBACzC,MAAMtB,QAAQa,OAAO,EAAEC,QAAQS,WAAW;oBACxCP;oBACAG,WAAWb,iCAAiCW;oBAC5CO,QAAQ;wBAACF,UAAUnB,gCAAgCmB;oBAAS;gBAC9D;YACF;QACF,IACAG;IACN;IAEA,eAAeC,4BAA4BC,KAE1C;QACC,MAAMC,eAAe,MAAMvB,sCAAsCsB,MAAMV,cAAc;QACrF,IAAI,CAACW,cAAc,OAAOH;QAC1B,MAAMI,aAAa,MAAMvC,6BAA6BsC,aAAaE,YAAY;QAC/E,IAAI,CAACD,YAAY,OAAOJ;QACxB,OAAOI;IACT;IAEA,eAAeE,0BACbJ,KAAqC;QAErC,OAAO,MAAM9B,6BAA6B,IACxCJ,KAAKuC,WAAW,CAAC,OAAOC;gBACtB,MAAMC,WAAW9C,sBAAsB,CAAC,OAAO,EAAEuC,MAAMC,YAAY,CAACO,YAAY,EAAE,EAAE;oBAClFC,UAAU;gBACZ;gBACA,MAAMC,OAAO,MAAM9C,4BACjB;oBACEyB,aAAaW,MAAMX,WAAW;oBAC9BsB,UAAU;oBACVC,mBAAmBZ,MAAMV,cAAc;oBACvCiB;gBACF,GACA;oBAACD;gBAAE;gBAEL,MAAMJ,aAAa,MAAMrC,4BACvB;oBACEwB,aAAaW,MAAMX,WAAW;oBAC9BsB,UAAU;oBACVC,mBAAmBZ,MAAMV,cAAc;oBACvCoB;oBACAG,aAAab,MAAMa,WAAW;oBAC9BC,iBAAiB;gBACnB,GACA;oBAACR;gBAAE;gBAGL,MAAMvB,yBACJ;oBACEoB,cAAcD,WAAWa,EAAE;oBAC3B,GAAGf,MAAMC,YAAY;gBACvB,GACA;oBAACK;gBAAE;gBAGL,OAAOJ;YACT;IAEJ;IAEA,OAAO;QACLS,UAAUlC,gCAAgC;YACxCsB;YACAK;YACArC;YACAC;YACAC;YACAN;YACAqD,QAAQlD;YACRmD,eAAe5C,QAAQa,OAAO,EAAE+B;YAChCC,YAAY;gBAAClC;YAAa;QAC5B;QACAmC,WAAW;YACT5C,sBAAsB;gBACpBwB;gBACAK;gBACAgB,wBAAwB;oBAAC;oBAAkB;iBAAc;YAC3D;SACD;QACDC,UAAU;YACRvD,IAAIc;YACJC,gBAAgBC;YAChBwC,qBAAqBnD;QACvB;IACF;AACF;AAEA,OAAO,MAAMoD,uBAAkD;IAC7DR,IAAI;IACJS,SAAS9D,OAAO+D,mCAAmC;IACnDC,MAAMtD;AACR,EAAE"}

package/dist/providers/linear.d.ts

@@ -0,0 +1,3 @@
+import type { IntegrationProviderModule } from '#providers/types.js';
+export declare const linearProviderModule: IntegrationProviderModule;
+//# sourceMappingURL=linear.d.ts.map

package/dist/providers/linear.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"linear.d.ts","sourceRoot":"","sources":["../../src/providers/linear.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAyB,yBAAyB,EAAC,MAAM,qBAAqB,CAAC;AAqJ3F,eAAO,MAAM,oBAAoB,EAAE,yBAIlC,CAAC"}

package/dist/providers/linear.js

@@ -0,0 +1,134 @@
+import { slugifyConnectionSlug } from '@shipfox/api-integration-core-dto';
+import { config } from '#config.js';
+import { deleteIntegrationConnection, getIntegrationConnectionById, resolveUniqueConnectionSlug, upsertIntegrationConnection } from '#db/connections.js';
+import { db } from '#db/db.js';
+import { publishIntegrationEventReceived, recordDeliveryOnly } from '#db/webhook-deliveries.js';
+import { retryConnectionSlugCollision } from '#providers/connection-slug.js';
+const LINEAR_MIGRATIONS_TABLE = '__drizzle_migrations_integrations_linear';
+const LINEAR_SECRETS_NAMESPACE_PREFIX = 'system/integrations/linear/';
+async function loadLinearModuleParts(options = {}) {
+    const { createLinearTokenStore, createLinearE2eRoutes, createLinearIntegrationProvider, config: linearConfig, disconnectLinearInstallation: disconnectLinearInstallationRecords, getLinearInstallationByOrganizationId, db: linearDb, migrationsPath: linearMigrationsPath, upsertLinearInstallation } = await import('@shipfox/api-integration-linear');
+    async function getExistingLinearConnection(input) {
+        const installation = await getLinearInstallationByOrganizationId(input.organizationId);
+        if (!installation) return undefined;
+        const connection = await getIntegrationConnectionById(installation.connectionId);
+        if (!connection) return undefined;
+        return connection;
+    }
+    async function connectLinearInstallation(input) {
+        return await retryConnectionSlugCollision(()=>db().transaction(async (tx)=>{
+                const baseSlug = slugifyConnectionSlug(`linear_${input.organizationUrlKey}`, {
+                    fallback: 'linear'
+                });
+                const slug = await resolveUniqueConnectionSlug({
+                    workspaceId: input.workspaceId,
+                    provider: 'linear',
+                    externalAccountId: input.organizationId,
+                    baseSlug
+                }, {
+                    tx
+                });
+                const connection = await upsertIntegrationConnection({
+                    workspaceId: input.workspaceId,
+                    provider: 'linear',
+                    externalAccountId: input.organizationId,
+                    slug,
+                    displayName: input.displayName,
+                    lifecycleStatus: 'active'
+                }, {
+                    tx
+                });
+                await upsertLinearInstallation({
+                    connectionId: connection.id,
+                    organizationId: input.organizationId,
+                    organizationUrlKey: input.organizationUrlKey,
+                    appUserId: input.appUserId,
+                    scopes: input.scopes,
+                    tokenExpiresAt: input.tokenExpiresAt,
+                    status: 'installed'
+                }, {
+                    tx
+                });
+                return connection;
+            }));
+    }
+    async function disconnectLinearInstallation(input) {
+        await disconnectLinearInstallationRecords({
+            connectionId: input.connectionId,
+            getConnection: getIntegrationConnectionById,
+            deleteSecrets: (params)=>options.secrets?.linear?.deleteSecrets({
+                    ...params,
+                    namespace: linearNamespaceSuffix(params.namespace)
+                }) ?? Promise.resolve(0),
+            transaction: (fn)=>db().transaction((tx)=>fn(tx)),
+            deleteConnection: (params, options)=>deleteIntegrationConnection({
+                    id: params.connectionId
+                }, options)
+        });
+    }
+    const fallbackSecrets = {
+        getSecret: ()=>Promise.resolve(null),
+        setSecrets: ()=>Promise.reject(new Error('Linear token storage is not configured'))
+    };
+    const secrets = options.secrets?.linear ? {
+        getSecret: (params)=>options.secrets?.linear?.getSecret({
+                ...params,
+                namespace: linearNamespaceSuffix(params.namespace)
+            }) ?? Promise.resolve(null),
+        setSecrets: (params)=>options.secrets?.linear?.setSecrets({
+                ...params,
+                namespace: linearNamespaceSuffix(params.namespace)
+            }) ?? Promise.resolve()
+    } : fallbackSecrets;
+    const tokenStore = createLinearTokenStore({
+        resolveConnection: async (connectionId)=>getIntegrationConnectionById(connectionId),
+        secrets
+    });
+    return {
+        provider: createLinearIntegrationProvider({
+            agentTools: {
+                tokenStore,
+                endpoint: linearConfig.LINEAR_MCP_ENDPOINT
+            },
+            routes: {
+                tokenStore,
+                getExistingLinearConnection,
+                connectLinearInstallation,
+                disconnectLinearInstallation,
+                publishIntegrationEventReceived,
+                recordDeliveryOnly,
+                getIntegrationConnectionById,
+                coreDb: db
+            }
+        }),
+        e2eRoutes: [
+            createLinearE2eRoutes({
+                tokenStore,
+                getExistingLinearConnection,
+                connectLinearInstallation,
+                disconnectLinearInstallation,
+                connectionCapabilities: [
+                    'agent_tools'
+                ]
+            })
+        ],
+        database: {
+            db: linearDb,
+            migrationsPath: linearMigrationsPath,
+            migrationsTableName: LINEAR_MIGRATIONS_TABLE
+        }
+    };
+}
+export const linearProviderModule = {
+    id: 'linear',
+    enabled: config.INTEGRATIONS_ENABLE_LINEAR_PROVIDER,
+    load: loadLinearModuleParts
+};
+function linearNamespaceSuffix(namespace) {
+    if (!namespace.startsWith(LINEAR_SECRETS_NAMESPACE_PREFIX)) {
+        throw new Error('Linear provider attempted to access an unscoped secret namespace');
+    }
+    return namespace.slice(LINEAR_SECRETS_NAMESPACE_PREFIX.length);
+}
+
+//# sourceMappingURL=linear.js.map

package/dist/providers/linear.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/providers/linear.ts"],"sourcesContent":["import {\n  type IntegrationConnection as CoreIntegrationConnection,\n  slugifyConnectionSlug,\n} from '@shipfox/api-integration-core-dto';\nimport type {\n  ConnectLinearInstallationInput,\n  LinearSecretsStore,\n} from '@shipfox/api-integration-linear';\nimport {config} from '#config.js';\nimport {\n  deleteIntegrationConnection,\n  getIntegrationConnectionById,\n  resolveUniqueConnectionSlug,\n  upsertIntegrationConnection,\n} from '#db/connections.js';\nimport {db} from '#db/db.js';\nimport {publishIntegrationEventReceived, recordDeliveryOnly} from '#db/webhook-deliveries.js';\nimport {retryConnectionSlugCollision} from '#providers/connection-slug.js';\nimport type {IntegrationModuleParts, IntegrationProviderModule} from '#providers/types.js';\n\nconst LINEAR_MIGRATIONS_TABLE = '__drizzle_migrations_integrations_linear';\nconst LINEAR_SECRETS_NAMESPACE_PREFIX = 'system/integrations/linear/';\n\ntype IntegrationDb = ReturnType<typeof db>;\ntype IntegrationTx = Parameters<Parameters<IntegrationDb['transaction']>[0]>[0];\n\nasync function loadLinearModuleParts(\n  options: Parameters<IntegrationProviderModule['load']>[0] = {},\n): Promise<IntegrationModuleParts> {\n  const {\n    createLinearTokenStore,\n    createLinearE2eRoutes,\n    createLinearIntegrationProvider,\n    config: linearConfig,\n    disconnectLinearInstallation: disconnectLinearInstallationRecords,\n    getLinearInstallationByOrganizationId,\n    db: linearDb,\n    migrationsPath: linearMigrationsPath,\n    upsertLinearInstallation,\n  } = await import('@shipfox/api-integration-linear');\n\n  async function getExistingLinearConnection(input: {\n    organizationId: string;\n  }): Promise<CoreIntegrationConnection<'linear'> | undefined> {\n    const installation = await getLinearInstallationByOrganizationId(input.organizationId);\n    if (!installation) return undefined;\n    const connection = await getIntegrationConnectionById(installation.connectionId);\n    if (!connection) return undefined;\n    return connection as CoreIntegrationConnection<'linear'>;\n  }\n\n  async function connectLinearInstallation(\n    input: ConnectLinearInstallationInput,\n  ): Promise<CoreIntegrationConnection<'linear'>> {\n    return await retryConnectionSlugCollision(() =>\n      db().transaction(async (tx) => {\n        const baseSlug = slugifyConnectionSlug(`linear_${input.organizationUrlKey}`, {\n          fallback: 'linear',\n        });\n        const slug = await resolveUniqueConnectionSlug(\n          {\n            workspaceId: input.workspaceId,\n            provider: 'linear',\n            externalAccountId: input.organizationId,\n            baseSlug,\n          },\n          {tx},\n        );\n        const connection = await upsertIntegrationConnection(\n          {\n            workspaceId: input.workspaceId,\n            provider: 'linear',\n            externalAccountId: input.organizationId,\n            slug,\n            displayName: input.displayName,\n            lifecycleStatus: 'active',\n          },\n          {tx},\n        );\n\n        await upsertLinearInstallation(\n          {\n            connectionId: connection.id,\n            organizationId: input.organizationId,\n            organizationUrlKey: input.organizationUrlKey,\n            appUserId: input.appUserId,\n            scopes: input.scopes,\n            tokenExpiresAt: input.tokenExpiresAt,\n            status: 'installed',\n          },\n          {tx},\n        );\n\n        return connection as CoreIntegrationConnection<'linear'>;\n      }),\n    );\n  }\n\n  async function disconnectLinearInstallation(input: {connectionId: string}): Promise<void> {\n    await disconnectLinearInstallationRecords<IntegrationTx>({\n      connectionId: input.connectionId,\n      getConnection: getIntegrationConnectionById,\n      deleteSecrets: (params) =>\n        options.secrets?.linear?.deleteSecrets({\n          ...params,\n          namespace: linearNamespaceSuffix(params.namespace),\n        }) ?? Promise.resolve(0),\n      transaction: (fn) => db().transaction((tx) => fn(tx)),\n      deleteConnection: (params, options) =>\n        deleteIntegrationConnection({id: params.connectionId}, options),\n    });\n  }\n\n  const fallbackSecrets: LinearSecretsStore = {\n    getSecret: () => Promise.resolve(null),\n    setSecrets: () => Promise.reject(new Error('Linear token storage is not configured')),\n  };\n  const secrets: LinearSecretsStore = options.secrets?.linear\n    ? {\n        getSecret: (params: Parameters<LinearSecretsStore['getSecret']>[0]) =>\n          options.secrets?.linear?.getSecret({\n            ...params,\n            namespace: linearNamespaceSuffix(params.namespace),\n          }) ?? Promise.resolve(null),\n        setSecrets: (params: Parameters<LinearSecretsStore['setSecrets']>[0]) =>\n          options.secrets?.linear?.setSecrets({\n            ...params,\n            namespace: linearNamespaceSuffix(params.namespace),\n          }) ?? Promise.resolve(),\n      }\n    : fallbackSecrets;\n  const tokenStore = createLinearTokenStore({\n    resolveConnection: async (connectionId) => getIntegrationConnectionById(connectionId),\n    secrets,\n  });\n\n  return {\n    provider: createLinearIntegrationProvider({\n      agentTools: {tokenStore, endpoint: linearConfig.LINEAR_MCP_ENDPOINT},\n      routes: {\n        tokenStore,\n        getExistingLinearConnection,\n        connectLinearInstallation,\n        disconnectLinearInstallation,\n        publishIntegrationEventReceived,\n        recordDeliveryOnly,\n        getIntegrationConnectionById,\n        coreDb: db,\n      },\n    }),\n    e2eRoutes: [\n      createLinearE2eRoutes({\n        tokenStore,\n        getExistingLinearConnection,\n        connectLinearInstallation,\n        disconnectLinearInstallation,\n        connectionCapabilities: ['agent_tools'],\n      }),\n    ],\n    database: {\n      db: linearDb,\n      migrationsPath: linearMigrationsPath,\n      migrationsTableName: LINEAR_MIGRATIONS_TABLE,\n    },\n  };\n}\n\nexport const linearProviderModule: IntegrationProviderModule = {\n  id: 'linear',\n  enabled: config.INTEGRATIONS_ENABLE_LINEAR_PROVIDER,\n  load: loadLinearModuleParts,\n};\n\nfunction linearNamespaceSuffix(namespace: string): string {\n  if (!namespace.startsWith(LINEAR_SECRETS_NAMESPACE_PREFIX)) {\n    throw new Error('Linear provider attempted to access an unscoped secret namespace');\n  }\n  return namespace.slice(LINEAR_SECRETS_NAMESPACE_PREFIX.length);\n}\n"],"names":["slugifyConnectionSlug","config","deleteIntegrationConnection","getIntegrationConnectionById","resolveUniqueConnectionSlug","upsertIntegrationConnection","db","publishIntegrationEventReceived","recordDeliveryOnly","retryConnectionSlugCollision","LINEAR_MIGRATIONS_TABLE","LINEAR_SECRETS_NAMESPACE_PREFIX","loadLinearModuleParts","options","createLinearTokenStore","createLinearE2eRoutes","createLinearIntegrationProvider","linearConfig","disconnectLinearInstallation","disconnectLinearInstallationRecords","getLinearInstallationByOrganizationId","linearDb","migrationsPath","linearMigrationsPath","upsertLinearInstallation","getExistingLinearConnection","input","installation","organizationId","undefined","connection","connectionId","connectLinearInstallation","transaction","tx","baseSlug","organizationUrlKey","fallback","slug","workspaceId","provider","externalAccountId","displayName","lifecycleStatus","id","appUserId","scopes","tokenExpiresAt","status","getConnection","deleteSecrets","params","secrets","linear","namespace","linearNamespaceSuffix","Promise","resolve","fn","deleteConnection","fallbackSecrets","getSecret","setSecrets","reject","Error","tokenStore","resolveConnection","agentTools","endpoint","LINEAR_MCP_ENDPOINT","routes","coreDb","e2eRoutes","connectionCapabilities","database","migrationsTableName","linearProviderModule","enabled","INTEGRATIONS_ENABLE_LINEAR_PROVIDER","load","startsWith","slice","length"],"mappings":"AAAA,SAEEA,qBAAqB,QAChB,oCAAoC;AAK3C,SAAQC,MAAM,QAAO,aAAa;AAClC,SACEC,2BAA2B,EAC3BC,4BAA4B,EAC5BC,2BAA2B,EAC3BC,2BAA2B,QACtB,qBAAqB;AAC5B,SAAQC,EAAE,QAAO,YAAY;AAC7B,SAAQC,+BAA+B,EAAEC,kBAAkB,QAAO,4BAA4B;AAC9F,SAAQC,4BAA4B,QAAO,gCAAgC;AAG3E,MAAMC,0BAA0B;AAChC,MAAMC,kCAAkC;AAKxC,eAAeC,sBACbC,UAA4D,CAAC,CAAC;IAE9D,MAAM,EACJC,sBAAsB,EACtBC,qBAAqB,EACrBC,+BAA+B,EAC/Bf,QAAQgB,YAAY,EACpBC,8BAA8BC,mCAAmC,EACjEC,qCAAqC,EACrCd,IAAIe,QAAQ,EACZC,gBAAgBC,oBAAoB,EACpCC,wBAAwB,EACzB,GAAG,MAAM,MAAM,CAAC;IAEjB,eAAeC,4BAA4BC,KAE1C;QACC,MAAMC,eAAe,MAAMP,sCAAsCM,MAAME,cAAc;QACrF,IAAI,CAACD,cAAc,OAAOE;QAC1B,MAAMC,aAAa,MAAM3B,6BAA6BwB,aAAaI,YAAY;QAC/E,IAAI,CAACD,YAAY,OAAOD;QACxB,OAAOC;IACT;IAEA,eAAeE,0BACbN,KAAqC;QAErC,OAAO,MAAMjB,6BAA6B,IACxCH,KAAK2B,WAAW,CAAC,OAAOC;gBACtB,MAAMC,WAAWnC,sBAAsB,CAAC,OAAO,EAAE0B,MAAMU,kBAAkB,EAAE,EAAE;oBAC3EC,UAAU;gBACZ;gBACA,MAAMC,OAAO,MAAMlC,4BACjB;oBACEmC,aAAab,MAAMa,WAAW;oBAC9BC,UAAU;oBACVC,mBAAmBf,MAAME,cAAc;oBACvCO;gBACF,GACA;oBAACD;gBAAE;gBAEL,MAAMJ,aAAa,MAAMzB,4BACvB;oBACEkC,aAAab,MAAMa,WAAW;oBAC9BC,UAAU;oBACVC,mBAAmBf,MAAME,cAAc;oBACvCU;oBACAI,aAAahB,MAAMgB,WAAW;oBAC9BC,iBAAiB;gBACnB,GACA;oBAACT;gBAAE;gBAGL,MAAMV,yBACJ;oBACEO,cAAcD,WAAWc,EAAE;oBAC3BhB,gBAAgBF,MAAME,cAAc;oBACpCQ,oBAAoBV,MAAMU,kBAAkB;oBAC5CS,WAAWnB,MAAMmB,SAAS;oBAC1BC,QAAQpB,MAAMoB,MAAM;oBACpBC,gBAAgBrB,MAAMqB,cAAc;oBACpCC,QAAQ;gBACV,GACA;oBAACd;gBAAE;gBAGL,OAAOJ;YACT;IAEJ;IAEA,eAAeZ,6BAA6BQ,KAA6B;QACvE,MAAMP,oCAAmD;YACvDY,cAAcL,MAAMK,YAAY;YAChCkB,eAAe9C;YACf+C,eAAe,CAACC,SACdtC,QAAQuC,OAAO,EAAEC,QAAQH,cAAc;oBACrC,GAAGC,MAAM;oBACTG,WAAWC,sBAAsBJ,OAAOG,SAAS;gBACnD,MAAME,QAAQC,OAAO,CAAC;YACxBxB,aAAa,CAACyB,KAAOpD,KAAK2B,WAAW,CAAC,CAACC,KAAOwB,GAAGxB;YACjDyB,kBAAkB,CAACR,QAAQtC,UACzBX,4BAA4B;oBAAC0C,IAAIO,OAAOpB,YAAY;gBAAA,GAAGlB;QAC3D;IACF;IAEA,MAAM+C,kBAAsC;QAC1CC,WAAW,IAAML,QAAQC,OAAO,CAAC;QACjCK,YAAY,IAAMN,QAAQO,MAAM,CAAC,IAAIC,MAAM;IAC7C;IACA,MAAMZ,UAA8BvC,QAAQuC,OAAO,EAAEC,SACjD;QACEQ,WAAW,CAACV,SACVtC,QAAQuC,OAAO,EAAEC,QAAQQ,UAAU;gBACjC,GAAGV,MAAM;gBACTG,WAAWC,sBAAsBJ,OAAOG,SAAS;YACnD,MAAME,QAAQC,OAAO,CAAC;QACxBK,YAAY,CAACX,SACXtC,QAAQuC,OAAO,EAAEC,QAAQS,WAAW;gBAClC,GAAGX,MAAM;gBACTG,WAAWC,sBAAsBJ,OAAOG,SAAS;YACnD,MAAME,QAAQC,OAAO;IACzB,IACAG;IACJ,MAAMK,aAAanD,uBAAuB;QACxCoD,mBAAmB,OAAOnC,eAAiB5B,6BAA6B4B;QACxEqB;IACF;IAEA,OAAO;QACLZ,UAAUxB,gCAAgC;YACxCmD,YAAY;gBAACF;gBAAYG,UAAUnD,aAAaoD,mBAAmB;YAAA;YACnEC,QAAQ;gBACNL;gBACAxC;gBACAO;gBACAd;gBACAX;gBACAC;gBACAL;gBACAoE,QAAQjE;YACV;QACF;QACAkE,WAAW;YACTzD,sBAAsB;gBACpBkD;gBACAxC;gBACAO;gBACAd;gBACAuD,wBAAwB;oBAAC;iBAAc;YACzC;SACD;QACDC,UAAU;YACRpE,IAAIe;YACJC,gBAAgBC;YAChBoD,qBAAqBjE;QACvB;IACF;AACF;AAEA,OAAO,MAAMkE,uBAAkD;IAC7DhC,IAAI;IACJiC,SAAS5E,OAAO6E,mCAAmC;IACnDC,MAAMnE;AACR,EAAE;AAEF,SAAS2C,sBAAsBD,SAAiB;IAC9C,IAAI,CAACA,UAAU0B,UAAU,CAACrE,kCAAkC;QAC1D,MAAM,IAAIqD,MAAM;IAClB;IACA,OAAOV,UAAU2B,KAAK,CAACtE,gCAAgCuE,MAAM;AAC/D"}

package/dist/providers/modules.d.ts

@@ -0,0 +1,3 @@
+import type { IntegrationModuleParts, IntegrationProviderModuleLoadOptions } from '#providers/types.js';
+export declare function loadEnabledProviderModules(options?: IntegrationProviderModuleLoadOptions): Promise<IntegrationModuleParts[]>;
+//# sourceMappingURL=modules.d.ts.map

package/dist/providers/modules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.d.ts","sourceRoot":"","sources":["../../src/providers/modules.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,sBAAsB,EACtB,oCAAoC,EACrC,MAAM,qBAAqB,CAAC;AAc7B,wBAAsB,0BAA0B,CAC9C,OAAO,GAAE,oCAAyC,GACjD,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAOnC"}

package/dist/providers/modules.js

@@ -0,0 +1,26 @@
+import { cronProviderModule } from '#providers/cron.js';
+import { giteaProviderModule } from '#providers/gitea.js';
+import { githubProviderModule } from '#providers/github.js';
+import { linearProviderModule } from '#providers/linear.js';
+import { sentryProviderModule } from '#providers/sentry.js';
+import { webhookProviderModule } from '#providers/webhook.js';
+// Order is significant: databases are migrated in this order, so list a provider
+// before any that depend on its tables.
+const providerModules = [
+    githubProviderModule,
+    linearProviderModule,
+    sentryProviderModule,
+    giteaProviderModule,
+    cronProviderModule,
+    webhookProviderModule
+];
+export async function loadEnabledProviderModules(options = {}) {
+    const parts = [];
+    for (const module of providerModules){
+        if (!module.enabled) continue;
+        parts.push(await module.load(options));
+    }
+    return parts;
+}
+
+//# sourceMappingURL=modules.js.map

package/dist/providers/modules.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/providers/modules.ts"],"sourcesContent":["import {cronProviderModule} from '#providers/cron.js';\nimport {giteaProviderModule} from '#providers/gitea.js';\nimport {githubProviderModule} from '#providers/github.js';\nimport {linearProviderModule} from '#providers/linear.js';\nimport {sentryProviderModule} from '#providers/sentry.js';\nimport type {\n  IntegrationModuleParts,\n  IntegrationProviderModuleLoadOptions,\n} from '#providers/types.js';\nimport {webhookProviderModule} from '#providers/webhook.js';\n\n// Order is significant: databases are migrated in this order, so list a provider\n// before any that depend on its tables.\nconst providerModules = [\n  githubProviderModule,\n  linearProviderModule,\n  sentryProviderModule,\n  giteaProviderModule,\n  cronProviderModule,\n  webhookProviderModule,\n];\n\nexport async function loadEnabledProviderModules(\n  options: IntegrationProviderModuleLoadOptions = {},\n): Promise<IntegrationModuleParts[]> {\n  const parts: IntegrationModuleParts[] = [];\n  for (const module of providerModules) {\n    if (!module.enabled) continue;\n    parts.push(await module.load(options));\n  }\n  return parts;\n}\n"],"names":["cronProviderModule","giteaProviderModule","githubProviderModule","linearProviderModule","sentryProviderModule","webhookProviderModule","providerModules","loadEnabledProviderModules","options","parts","module","enabled","push","load"],"mappings":"AAAA,SAAQA,kBAAkB,QAAO,qBAAqB;AACtD,SAAQC,mBAAmB,QAAO,sBAAsB;AACxD,SAAQC,oBAAoB,QAAO,uBAAuB;AAC1D,SAAQC,oBAAoB,QAAO,uBAAuB;AAC1D,SAAQC,oBAAoB,QAAO,uBAAuB;AAK1D,SAAQC,qBAAqB,QAAO,wBAAwB;AAE5D,iFAAiF;AACjF,wCAAwC;AACxC,MAAMC,kBAAkB;IACtBJ;IACAC;IACAC;IACAH;IACAD;IACAK;CACD;AAED,OAAO,eAAeE,2BACpBC,UAAgD,CAAC,CAAC;IAElD,MAAMC,QAAkC,EAAE;IAC1C,KAAK,MAAMC,UAAUJ,gBAAiB;QACpC,IAAI,CAACI,OAAOC,OAAO,EAAE;QACrBF,MAAMG,IAAI,CAAC,MAAMF,OAAOG,IAAI,CAACL;IAC/B;IACA,OAAOC;AACT"}

package/dist/providers/sentry.d.ts

@@ -0,0 +1,3 @@
+import type { IntegrationProviderModule } from '#providers/types.js';
+export declare const sentryProviderModule: IntegrationProviderModule;
+//# sourceMappingURL=sentry.d.ts.map

package/dist/providers/sentry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry.d.ts","sourceRoot":"","sources":["../../src/providers/sentry.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAyB,yBAAyB,EAAC,MAAM,qBAAqB,CAAC;AA6F3F,eAAO,MAAM,oBAAoB,EAAE,yBAIlC,CAAC"}

package/dist/providers/sentry.js

@@ -0,0 +1,83 @@
+import { slugifyConnectionSlug } from '@shipfox/api-integration-core-dto';
+import { config } from '#config.js';
+import { getIntegrationConnectionById, resolveUniqueConnectionSlug, updateIntegrationConnectionLifecycleStatus, upsertIntegrationConnection } from '#db/connections.js';
+import { db } from '#db/db.js';
+import { publishIntegrationEventReceived, recordDeliveryOnly } from '#db/webhook-deliveries.js';
+import { retryConnectionSlugCollision } from '#providers/connection-slug.js';
+// Stable migration-tracking table name for the Sentry provider database. This
+// must NOT depend on the provider's position in the module `database` array. A
+// positional name would shift if a provider is flag-disabled and silently
+// re-run migrations against existing tables.
+const SENTRY_MIGRATIONS_TABLE = '__drizzle_migrations_integrations_sentry';
+async function loadSentryModuleParts() {
+    const { createSentryIntegrationProvider, createSentryMaintenanceWorker, getSentryInstallationByInstallationUuid, persistVerifiedUnclaimedInstallation, upsertSentryInstallation, db: sentryDb, migrationsPath: sentryMigrationsPath } = await import('@shipfox/api-integration-sentry');
+    async function getConnectionById(id) {
+        const connection = await getIntegrationConnectionById(id);
+        if (!connection) return undefined;
+        return connection;
+    }
+    async function connectSentryInstallation(input) {
+        return await retryConnectionSlugCollision(()=>db().transaction(async (tx)=>{
+                const baseSlug = slugifyConnectionSlug(`sentry_${input.orgSlug}`, {
+                    fallback: 'sentry'
+                });
+                const slug = await resolveUniqueConnectionSlug({
+                    workspaceId: input.workspaceId,
+                    provider: 'sentry',
+                    externalAccountId: input.installationUuid,
+                    baseSlug
+                }, {
+                    tx
+                });
+                const connection = await upsertIntegrationConnection({
+                    workspaceId: input.workspaceId,
+                    provider: 'sentry',
+                    externalAccountId: input.installationUuid,
+                    slug,
+                    displayName: input.displayName,
+                    lifecycleStatus: 'active'
+                }, {
+                    tx
+                });
+                await upsertSentryInstallation({
+                    connectionId: connection.id,
+                    installationUuid: input.installationUuid,
+                    orgSlug: input.orgSlug,
+                    status: 'installed',
+                    codeHash: input.codeHash,
+                    installerUserId: input.installerUserId
+                }, {
+                    tx
+                });
+                return connection;
+            }));
+    }
+    return {
+        provider: createSentryIntegrationProvider({
+            getSentryInstallation: ({ installationUuid })=>getSentryInstallationByInstallationUuid(installationUuid),
+            getConnectionById,
+            connectSentryInstallation,
+            persistVerifiedUnclaimedInstallation,
+            coreDb: db,
+            publishIntegrationEventReceived,
+            recordDeliveryOnly,
+            getIntegrationConnectionById,
+            updateConnectionLifecycleStatus: updateIntegrationConnectionLifecycleStatus
+        }),
+        database: {
+            db: sentryDb,
+            migrationsPath: sentryMigrationsPath,
+            migrationsTableName: SENTRY_MIGRATIONS_TABLE
+        },
+        workers: [
+            createSentryMaintenanceWorker()
+        ]
+    };
+}
+export const sentryProviderModule = {
+    id: 'sentry',
+    enabled: config.INTEGRATIONS_ENABLE_SENTRY_PROVIDER,
+    load: loadSentryModuleParts
+};
+
+//# sourceMappingURL=sentry.js.map

package/dist/providers/sentry.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/providers/sentry.ts"],"sourcesContent":["import {\n  type IntegrationConnection as CoreIntegrationConnection,\n  slugifyConnectionSlug,\n} from '@shipfox/api-integration-core-dto';\nimport type {ConnectSentryInstallationInput} from '@shipfox/api-integration-sentry';\nimport {config} from '#config.js';\nimport {\n  getIntegrationConnectionById,\n  resolveUniqueConnectionSlug,\n  updateIntegrationConnectionLifecycleStatus,\n  upsertIntegrationConnection,\n} from '#db/connections.js';\nimport {db} from '#db/db.js';\nimport {publishIntegrationEventReceived, recordDeliveryOnly} from '#db/webhook-deliveries.js';\nimport {retryConnectionSlugCollision} from '#providers/connection-slug.js';\nimport type {IntegrationModuleParts, IntegrationProviderModule} from '#providers/types.js';\n\n// Stable migration-tracking table name for the Sentry provider database. This\n// must NOT depend on the provider's position in the module `database` array. A\n// positional name would shift if a provider is flag-disabled and silently\n// re-run migrations against existing tables.\nconst SENTRY_MIGRATIONS_TABLE = '__drizzle_migrations_integrations_sentry';\n\nasync function loadSentryModuleParts(): Promise<IntegrationModuleParts> {\n  const {\n    createSentryIntegrationProvider,\n    createSentryMaintenanceWorker,\n    getSentryInstallationByInstallationUuid,\n    persistVerifiedUnclaimedInstallation,\n    upsertSentryInstallation,\n    db: sentryDb,\n    migrationsPath: sentryMigrationsPath,\n  } = await import('@shipfox/api-integration-sentry');\n\n  async function getConnectionById(\n    id: string,\n  ): Promise<CoreIntegrationConnection<'sentry'> | undefined> {\n    const connection = await getIntegrationConnectionById(id);\n    if (!connection) return undefined;\n    return connection as CoreIntegrationConnection<'sentry'>;\n  }\n\n  async function connectSentryInstallation(\n    input: ConnectSentryInstallationInput,\n  ): Promise<CoreIntegrationConnection<'sentry'>> {\n    return await retryConnectionSlugCollision(() =>\n      db().transaction(async (tx) => {\n        const baseSlug = slugifyConnectionSlug(`sentry_${input.orgSlug}`, {fallback: 'sentry'});\n        const slug = await resolveUniqueConnectionSlug(\n          {\n            workspaceId: input.workspaceId,\n            provider: 'sentry',\n            externalAccountId: input.installationUuid,\n            baseSlug,\n          },\n          {tx},\n        );\n        const connection = await upsertIntegrationConnection(\n          {\n            workspaceId: input.workspaceId,\n            provider: 'sentry',\n            externalAccountId: input.installationUuid,\n            slug,\n            displayName: input.displayName,\n            lifecycleStatus: 'active',\n          },\n          {tx},\n        );\n\n        await upsertSentryInstallation(\n          {\n            connectionId: connection.id,\n            installationUuid: input.installationUuid,\n            orgSlug: input.orgSlug,\n            status: 'installed',\n            codeHash: input.codeHash,\n            installerUserId: input.installerUserId,\n          },\n          {tx},\n        );\n\n        return connection as CoreIntegrationConnection<'sentry'>;\n      }),\n    );\n  }\n\n  return {\n    provider: createSentryIntegrationProvider({\n      getSentryInstallation: ({installationUuid}) =>\n        getSentryInstallationByInstallationUuid(installationUuid),\n      getConnectionById,\n      connectSentryInstallation,\n      persistVerifiedUnclaimedInstallation,\n      coreDb: db,\n      publishIntegrationEventReceived,\n      recordDeliveryOnly,\n      getIntegrationConnectionById,\n      updateConnectionLifecycleStatus: updateIntegrationConnectionLifecycleStatus,\n    }),\n    database: {\n      db: sentryDb,\n      migrationsPath: sentryMigrationsPath,\n      migrationsTableName: SENTRY_MIGRATIONS_TABLE,\n    },\n    workers: [createSentryMaintenanceWorker()],\n  };\n}\n\nexport const sentryProviderModule: IntegrationProviderModule = {\n  id: 'sentry',\n  enabled: config.INTEGRATIONS_ENABLE_SENTRY_PROVIDER,\n  load: loadSentryModuleParts,\n};\n"],"names":["slugifyConnectionSlug","config","getIntegrationConnectionById","resolveUniqueConnectionSlug","updateIntegrationConnectionLifecycleStatus","upsertIntegrationConnection","db","publishIntegrationEventReceived","recordDeliveryOnly","retryConnectionSlugCollision","SENTRY_MIGRATIONS_TABLE","loadSentryModuleParts","createSentryIntegrationProvider","createSentryMaintenanceWorker","getSentryInstallationByInstallationUuid","persistVerifiedUnclaimedInstallation","upsertSentryInstallation","sentryDb","migrationsPath","sentryMigrationsPath","getConnectionById","id","connection","undefined","connectSentryInstallation","input","transaction","tx","baseSlug","orgSlug","fallback","slug","workspaceId","provider","externalAccountId","installationUuid","displayName","lifecycleStatus","connectionId","status","codeHash","installerUserId","getSentryInstallation","coreDb","updateConnectionLifecycleStatus","database","migrationsTableName","workers","sentryProviderModule","enabled","INTEGRATIONS_ENABLE_SENTRY_PROVIDER","load"],"mappings":"AAAA,SAEEA,qBAAqB,QAChB,oCAAoC;AAE3C,SAAQC,MAAM,QAAO,aAAa;AAClC,SACEC,4BAA4B,EAC5BC,2BAA2B,EAC3BC,0CAA0C,EAC1CC,2BAA2B,QACtB,qBAAqB;AAC5B,SAAQC,EAAE,QAAO,YAAY;AAC7B,SAAQC,+BAA+B,EAAEC,kBAAkB,QAAO,4BAA4B;AAC9F,SAAQC,4BAA4B,QAAO,gCAAgC;AAG3E,8EAA8E;AAC9E,+EAA+E;AAC/E,0EAA0E;AAC1E,6CAA6C;AAC7C,MAAMC,0BAA0B;AAEhC,eAAeC;IACb,MAAM,EACJC,+BAA+B,EAC/BC,6BAA6B,EAC7BC,uCAAuC,EACvCC,oCAAoC,EACpCC,wBAAwB,EACxBV,IAAIW,QAAQ,EACZC,gBAAgBC,oBAAoB,EACrC,GAAG,MAAM,MAAM,CAAC;IAEjB,eAAeC,kBACbC,EAAU;QAEV,MAAMC,aAAa,MAAMpB,6BAA6BmB;QACtD,IAAI,CAACC,YAAY,OAAOC;QACxB,OAAOD;IACT;IAEA,eAAeE,0BACbC,KAAqC;QAErC,OAAO,MAAMhB,6BAA6B,IACxCH,KAAKoB,WAAW,CAAC,OAAOC;gBACtB,MAAMC,WAAW5B,sBAAsB,CAAC,OAAO,EAAEyB,MAAMI,OAAO,EAAE,EAAE;oBAACC,UAAU;gBAAQ;gBACrF,MAAMC,OAAO,MAAM5B,4BACjB;oBACE6B,aAAaP,MAAMO,WAAW;oBAC9BC,UAAU;oBACVC,mBAAmBT,MAAMU,gBAAgB;oBACzCP;gBACF,GACA;oBAACD;gBAAE;gBAEL,MAAML,aAAa,MAAMjB,4BACvB;oBACE2B,aAAaP,MAAMO,WAAW;oBAC9BC,UAAU;oBACVC,mBAAmBT,MAAMU,gBAAgB;oBACzCJ;oBACAK,aAAaX,MAAMW,WAAW;oBAC9BC,iBAAiB;gBACnB,GACA;oBAACV;gBAAE;gBAGL,MAAMX,yBACJ;oBACEsB,cAAchB,WAAWD,EAAE;oBAC3Bc,kBAAkBV,MAAMU,gBAAgB;oBACxCN,SAASJ,MAAMI,OAAO;oBACtBU,QAAQ;oBACRC,UAAUf,MAAMe,QAAQ;oBACxBC,iBAAiBhB,MAAMgB,eAAe;gBACxC,GACA;oBAACd;gBAAE;gBAGL,OAAOL;YACT;IAEJ;IAEA,OAAO;QACLW,UAAUrB,gCAAgC;YACxC8B,uBAAuB,CAAC,EAACP,gBAAgB,EAAC,GACxCrB,wCAAwCqB;YAC1Cf;YACAI;YACAT;YACA4B,QAAQrC;YACRC;YACAC;YACAN;YACA0C,iCAAiCxC;QACnC;QACAyC,UAAU;YACRvC,IAAIW;YACJC,gBAAgBC;YAChB2B,qBAAqBpC;QACvB;QACAqC,SAAS;YAAClC;SAAgC;IAC5C;AACF;AAEA,OAAO,MAAMmC,uBAAkD;IAC7D3B,IAAI;IACJ4B,SAAShD,OAAOiD,mCAAmC;IACnDC,MAAMxC;AACR,EAAE"}

package/dist/providers/types.d.ts

@@ -0,0 +1,58 @@
+import type { RouteExport } from '@shipfox/node-fastify';
+import type { ModuleDatabase, ModuleWorker } from '@shipfox/node-module';
+import type { IntegrationProvider } from '#core/entities/provider.js';
+/**
+ * Everything one integration contributes to the composed integrations module:
+ * a registry provider, plus an optional dedicated database, background workers,
+ * and one-shot boot-time tasks. Providers that own none of these simply omit them.
+ *
+ * A startup task is run once after modules are initialized (migrations done). The
+ * provider owns its own wiring — core runs each task generically and isolates
+ * failures so a task can never gate API boot.
+ */
+export interface IntegrationModuleParts {
+    provider: IntegrationProvider;
+    database?: ModuleDatabase | undefined;
+    e2eRoutes?: RouteExport[] | undefined;
+    workers?: ModuleWorker[] | undefined;
+    startupTasks?: Array<() => Promise<void>> | undefined;
+}
+/**
+ * A config-gated integration, registered once in `providerModules`. `load` is
+ * called lazily and only when `enabled`, so a disabled provider never imports
+ * its (potentially heavy) implementation package.
+ */
+export interface IntegrationProviderModule {
+    id: string;
+    enabled: boolean;
+    load(options?: IntegrationProviderModuleLoadOptions): Promise<IntegrationModuleParts>;
+}
+export interface IntegrationProviderModuleLoadOptions {
+    secrets?: IntegrationProviderSecrets | undefined;
+}
+export interface IntegrationProviderSecrets {
+    github?: IntegrationProviderScopedSecrets | undefined;
+    linear?: IntegrationProviderScopedSecrets | undefined;
+    deleteSecrets(params: {
+        workspaceId: string;
+        namespace: string;
+    }): Promise<number>;
+}
+export interface IntegrationProviderScopedSecrets {
+    getSecret(params: {
+        workspaceId: string;
+        namespace: string;
+        key: string;
+    }): Promise<string | null>;
+    setSecrets(params: {
+        workspaceId: string;
+        namespace: string;
+        values: Record<string, string>;
+        editedBy?: string | null | undefined;
+    }): Promise<void>;
+    deleteSecrets(params: {
+        workspaceId: string;
+        namespace: string;
+    }): Promise<number>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/providers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/providers/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAC,cAAc,EAAE,YAAY,EAAC,MAAM,sBAAsB,CAAC;AACvE,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,4BAA4B,CAAC;AAEpE;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IACtC,SAAS,CAAC,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;IACtC,OAAO,CAAC,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC;IACrC,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CACvD;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,OAAO,CAAC,EAAE,oCAAoC,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACvF;AAED,MAAM,WAAW,oCAAoC;IACnD,OAAO,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;CAClD;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,CAAC,EAAE,gCAAgC,GAAG,SAAS,CAAC;IACtD,MAAM,CAAC,EAAE,gCAAgC,GAAG,SAAS,CAAC;IACtD,aAAa,CAAC,MAAM,EAAE;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAClF;AAED,MAAM,WAAW,gCAAgC;IAC/C,SAAS,CAAC,MAAM,EAAE;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjG,UAAU,CAAC,MAAM,EAAE;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;KACtC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,aAAa,CAAC,MAAM,EAAE;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAClF"}

package/dist/providers/types.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=types.js.map

package/dist/providers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/providers/types.ts"],"sourcesContent":["import type {RouteExport} from '@shipfox/node-fastify';\nimport type {ModuleDatabase, ModuleWorker} from '@shipfox/node-module';\nimport type {IntegrationProvider} from '#core/entities/provider.js';\n\n/**\n * Everything one integration contributes to the composed integrations module:\n * a registry provider, plus an optional dedicated database, background workers,\n * and one-shot boot-time tasks. Providers that own none of these simply omit them.\n *\n * A startup task is run once after modules are initialized (migrations done). The\n * provider owns its own wiring — core runs each task generically and isolates\n * failures so a task can never gate API boot.\n */\nexport interface IntegrationModuleParts {\n  provider: IntegrationProvider;\n  database?: ModuleDatabase | undefined;\n  e2eRoutes?: RouteExport[] | undefined;\n  workers?: ModuleWorker[] | undefined;\n  startupTasks?: Array<() => Promise<void>> | undefined;\n}\n\n/**\n * A config-gated integration, registered once in `providerModules`. `load` is\n * called lazily and only when `enabled`, so a disabled provider never imports\n * its (potentially heavy) implementation package.\n */\nexport interface IntegrationProviderModule {\n  id: string;\n  enabled: boolean;\n  load(options?: IntegrationProviderModuleLoadOptions): Promise<IntegrationModuleParts>;\n}\n\nexport interface IntegrationProviderModuleLoadOptions {\n  secrets?: IntegrationProviderSecrets | undefined;\n}\n\nexport interface IntegrationProviderSecrets {\n  github?: IntegrationProviderScopedSecrets | undefined;\n  linear?: IntegrationProviderScopedSecrets | undefined;\n  deleteSecrets(params: {workspaceId: string; namespace: string}): Promise<number>;\n}\n\nexport interface IntegrationProviderScopedSecrets {\n  getSecret(params: {workspaceId: string; namespace: string; key: string}): Promise<string | null>;\n  setSecrets(params: {\n    workspaceId: string;\n    namespace: string;\n    values: Record<string, string>;\n    editedBy?: string | null | undefined;\n  }): Promise<void>;\n  deleteSecrets(params: {workspaceId: string; namespace: string}): Promise<number>;\n}\n"],"names":[],"mappings":"AA0CA,WASC"}

package/dist/providers/webhook.d.ts

@@ -0,0 +1,3 @@
+import type { IntegrationProviderModule } from '#providers/types.js';
+export declare const webhookProviderModule: IntegrationProviderModule;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/providers/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/providers/webhook.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,qBAAqB,CAAC;AAEnE,eAAO,MAAM,qBAAqB,EAAE,yBAiBnC,CAAC"}

package/dist/providers/webhook.js

@@ -0,0 +1,24 @@
+import { config } from '#config.js';
+import { createIntegrationConnection, deleteIntegrationConnection, getIntegrationConnectionById, listIntegrationConnections, updateIntegrationConnectionLifecycleStatus } from '#db/connections.js';
+import { db } from '#db/db.js';
+import { publishIntegrationEventReceived } from '#db/webhook-deliveries.js';
+export const webhookProviderModule = {
+    id: 'webhook',
+    enabled: config.INTEGRATIONS_ENABLE_WEBHOOK_PROVIDER,
+    load: async ()=>{
+        const { createWebhookIntegrationProvider } = await import('@shipfox/api-integration-webhook');
+        return {
+            provider: createWebhookIntegrationProvider({
+                coreDb: db,
+                createIntegrationConnection,
+                listIntegrationConnections,
+                getIntegrationConnectionById,
+                updateIntegrationConnectionLifecycleStatus,
+                deleteIntegrationConnection,
+                publishIntegrationEventReceived
+            })
+        };
+    }
+};
+
+//# sourceMappingURL=webhook.js.map

package/dist/providers/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/providers/webhook.ts"],"sourcesContent":["import {config} from '#config.js';\nimport {\n  createIntegrationConnection,\n  deleteIntegrationConnection,\n  getIntegrationConnectionById,\n  listIntegrationConnections,\n  updateIntegrationConnectionLifecycleStatus,\n} from '#db/connections.js';\nimport {db} from '#db/db.js';\nimport {publishIntegrationEventReceived} from '#db/webhook-deliveries.js';\nimport type {IntegrationProviderModule} from '#providers/types.js';\n\nexport const webhookProviderModule: IntegrationProviderModule = {\n  id: 'webhook',\n  enabled: config.INTEGRATIONS_ENABLE_WEBHOOK_PROVIDER,\n  load: async () => {\n    const {createWebhookIntegrationProvider} = await import('@shipfox/api-integration-webhook');\n    return {\n      provider: createWebhookIntegrationProvider({\n        coreDb: db,\n        createIntegrationConnection,\n        listIntegrationConnections,\n        getIntegrationConnectionById,\n        updateIntegrationConnectionLifecycleStatus,\n        deleteIntegrationConnection,\n        publishIntegrationEventReceived,\n      }),\n    };\n  },\n};\n"],"names":["config","createIntegrationConnection","deleteIntegrationConnection","getIntegrationConnectionById","listIntegrationConnections","updateIntegrationConnectionLifecycleStatus","db","publishIntegrationEventReceived","webhookProviderModule","id","enabled","INTEGRATIONS_ENABLE_WEBHOOK_PROVIDER","load","createWebhookIntegrationProvider","provider","coreDb"],"mappings":"AAAA,SAAQA,MAAM,QAAO,aAAa;AAClC,SACEC,2BAA2B,EAC3BC,2BAA2B,EAC3BC,4BAA4B,EAC5BC,0BAA0B,EAC1BC,0CAA0C,QACrC,qBAAqB;AAC5B,SAAQC,EAAE,QAAO,YAAY;AAC7B,SAAQC,+BAA+B,QAAO,4BAA4B;AAG1E,OAAO,MAAMC,wBAAmD;IAC9DC,IAAI;IACJC,SAASV,OAAOW,oCAAoC;IACpDC,MAAM;QACJ,MAAM,EAACC,gCAAgC,EAAC,GAAG,MAAM,MAAM,CAAC;QACxD,OAAO;YACLC,UAAUD,iCAAiC;gBACzCE,QAAQT;gBACRL;gBACAG;gBACAD;gBACAE;gBACAH;gBACAK;YACF;QACF;IACF;AACF,EAAE"}

package/dist/temporal/activities/index.d.ts

@@ -0,0 +1,5 @@
+import { pruneWebhookDeliveriesActivity } from './prune-webhook-deliveries.js';
+export declare function createIntegrationsMaintenanceActivities(): {
+    pruneWebhookDeliveriesActivity: typeof pruneWebhookDeliveriesActivity;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/temporal/activities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/temporal/activities/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,8BAA8B,EAAC,MAAM,+BAA+B,CAAC;AAE7E,wBAAgB,uCAAuC;;EAItD"}

package/dist/temporal/activities/index.js

@@ -0,0 +1,8 @@
+import { pruneWebhookDeliveriesActivity } from './prune-webhook-deliveries.js';
+export function createIntegrationsMaintenanceActivities() {
+    return {
+        pruneWebhookDeliveriesActivity
+    };
+}
+
+//# sourceMappingURL=index.js.map

package/dist/temporal/activities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/temporal/activities/index.ts"],"sourcesContent":["import {pruneWebhookDeliveriesActivity} from './prune-webhook-deliveries.js';\n\nexport function createIntegrationsMaintenanceActivities() {\n  return {\n    pruneWebhookDeliveriesActivity,\n  };\n}\n"],"names":["pruneWebhookDeliveriesActivity","createIntegrationsMaintenanceActivities"],"mappings":"AAAA,SAAQA,8BAA8B,QAAO,gCAAgC;AAE7E,OAAO,SAASC;IACd,OAAO;QACLD;IACF;AACF"}

package/dist/temporal/activities/prune-webhook-deliveries.d.ts

@@ -0,0 +1,4 @@
+export declare function pruneWebhookDeliveriesActivity(): Promise<{
+    deleted: number;
+}>;
+//# sourceMappingURL=prune-webhook-deliveries.d.ts.map

package/dist/temporal/activities/prune-webhook-deliveries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prune-webhook-deliveries.d.ts","sourceRoot":"","sources":["../../../src/temporal/activities/prune-webhook-deliveries.ts"],"names":[],"mappings":"AAKA,wBAAsB,8BAA8B,IAAI,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC,CAGjF"}

package/dist/temporal/activities/prune-webhook-deliveries.js

@@ -0,0 +1,11 @@
+import { pruneWebhookDeliveries } from '#db/webhook-deliveries.js';
+import { WEBHOOK_DELIVERY_RETENTION_DAYS } from '#temporal/constants.js';
+const MS_PER_DAY = 24 * 60 * 60 * 1000;
+export async function pruneWebhookDeliveriesActivity() {
+    const olderThan = new Date(Date.now() - WEBHOOK_DELIVERY_RETENTION_DAYS * MS_PER_DAY);
+    return await pruneWebhookDeliveries({
+        olderThan
+    });
+}
+
+//# sourceMappingURL=prune-webhook-deliveries.js.map

package/dist/temporal/activities/prune-webhook-deliveries.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/temporal/activities/prune-webhook-deliveries.ts"],"sourcesContent":["import {pruneWebhookDeliveries} from '#db/webhook-deliveries.js';\nimport {WEBHOOK_DELIVERY_RETENTION_DAYS} from '#temporal/constants.js';\n\nconst MS_PER_DAY = 24 * 60 * 60 * 1000;\n\nexport async function pruneWebhookDeliveriesActivity(): Promise<{deleted: number}> {\n  const olderThan = new Date(Date.now() - WEBHOOK_DELIVERY_RETENTION_DAYS * MS_PER_DAY);\n  return await pruneWebhookDeliveries({olderThan});\n}\n"],"names":["pruneWebhookDeliveries","WEBHOOK_DELIVERY_RETENTION_DAYS","MS_PER_DAY","pruneWebhookDeliveriesActivity","olderThan","Date","now"],"mappings":"AAAA,SAAQA,sBAAsB,QAAO,4BAA4B;AACjE,SAAQC,+BAA+B,QAAO,yBAAyB;AAEvE,MAAMC,aAAa,KAAK,KAAK,KAAK;AAElC,OAAO,eAAeC;IACpB,MAAMC,YAAY,IAAIC,KAAKA,KAAKC,GAAG,KAAKL,kCAAkCC;IAC1E,OAAO,MAAMF,uBAAuB;QAACI;IAAS;AAChD"}

package/dist/temporal/constants.d.ts

@@ -0,0 +1,3 @@
+export declare const INTEGRATIONS_MAINTENANCE_TASK_QUEUE = "integrations-maintenance";
+export declare const WEBHOOK_DELIVERY_RETENTION_DAYS = 30;
+//# sourceMappingURL=constants.d.ts.map