@shipfox/api-integration-jira 11.0.0 → 12.1.0

package/dist/index.js

@@ -1,11 +1,18 @@
 import { JIRA_PROVIDER } from '@shipfox/api-integration-jira-dto';
-import { createJiraApiClient } from '#api/client.js';
+import { createJiraAgentToolsClient, createJiraApiClient } from '#api/client.js';
 import { config } from '#config.js';
+import { JiraAgentToolsProvider } from '#core/agent-tools-provider.js';
+import { createJiraWebhookProcessor } from '#core/webhook-processor.js';
+import { registerJiraWebhook } from '#core/webhook-registration.js';
 import { closeDb, db } from '#db/db.js';
 import { getJiraInstallationByConnectionId } from '#db/installations.js';
 import { migrationsPath } from '#db/migrations.js';
 import { createJiraIntegrationRoutes } from '#presentation/routes/install.js';
-export { createJiraApiClient, mapJiraError } from '#api/client.js';
+import { createJiraWebhookRoutes, JIRA_WEBHOOK_ROUTE_PREFIX } from '#presentation/routes/webhooks.js';
+const TRAILING_SLASHES_RE = /\/+$/;
+export { createJiraAgentToolsClient, createJiraApiClient, JIRA_DYNAMIC_WEBHOOK_EVENTS, JIRA_DYNAMIC_WEBHOOK_JQL, mapJiraError } from '#api/client.js';
+export { jiraAgentToolCatalog, jiraAgentToolSelectionCatalog, jiraPlainTextToAdf } from '#core/agent-tools.js';
+export { JiraAgentToolsProvider } from '#core/agent-tools-provider.js';
 export { disconnectJiraInstallation } from '#core/disconnect.js';
 export { JiraAccessTokenMissingError, JiraAuthorizationScopeMismatchError, JiraConnectionAlreadyLinkedError, JiraConnectionNotFoundError, JiraInstallationAlreadyLinkedError, JiraInstallationSiteMismatchError, JiraInstallStateActorMismatchError, JiraInstallStateError, JiraIntegrationProviderError, JiraOAuthCallbackError, JiraOfflineAccessNotGrantedError, JiraPendingSelectionNotFoundError, JiraSiteSelectionMismatchError, JiraTokenUnrefreshableError } from '#core/errors.js';
 export { handleJiraCallback, handleJiraOAuthCallbackError, handleJiraSiteSelection } from '#core/install.js';
@@ -13,26 +20,87 @@ export { createJiraPendingSelectionStore, jiraPendingSecretsNamespace } from '#c
 export { assertJiraAuthorizationScopes, formatJiraOAuthScopes, JIRA_OAUTH_SCOPES } from '#core/scopes.js';
 export { signJiraInstallState, verifyJiraInstallState } from '#core/state.js';
 export { createJiraTokenStore, jiraSecretsNamespace } from '#core/tokens.js';
-export { deleteJiraInstallationByConnectionId, getJiraInstallationByCloudId, getJiraInstallationByConnectionId, getJiraInstallationByWebhookId, markJiraInstallationRevoked, updateJiraInstallationTokenExpiry, upsertJiraInstallation, withJiraRefreshLock } from '#db/installations.js';
+export { createJiraWebhookProcessor } from '#core/webhook-processor.js';
+export { JIRA_WEBHOOK_TTL_MS, registerJiraWebhook } from '#core/webhook-registration.js';
+export { deleteJiraInstallationByConnectionId, getJiraInstallationByCloudId, getJiraInstallationByConnectionId, getJiraInstallationByWebhookId, listJiraInstallationsDueForTokenRefresh, markJiraInstallationRevoked, updateJiraInstallationTokenExpiry, updateJiraInstallationWebhook, upsertJiraInstallation, withJiraRefreshLock, withJiraWebhookRegistrationLock } from '#db/installations.js';
+export { createJiraWebhookRoutes } from '#presentation/routes/webhooks.js';
+export { createJiraMaintenanceWorker } from '#temporal/worker.js';
 export { closeDb, config, db, migrationsPath };
 export function createJiraIntegrationProvider(options = {}) {
     const jira = options.jira ?? createJiraApiClient();
     const getInstallationByConnectionId = options.getJiraInstallationByConnectionId ?? getJiraInstallationByConnectionId;
+    const adapters = options.agentTools ? {
+        agent_tools: new JiraAgentToolsProvider({
+            jira: options.agentTools.jira ?? createJiraAgentToolsClient(),
+            tokenStore: options.agentTools.tokenStore
+        })
+    } : {};
+    const webhookOptions = toJiraWebhookOptions(options.routes);
+    const webhookProcessor = webhookOptions ? createJiraWebhookProcessor(webhookOptions) : undefined;
+    const webhookRoutes = webhookOptions ? [
+        createJiraWebhookRoutes({
+            coreDb: webhookOptions.coreDb,
+            publishIntegrationEventReceived: webhookOptions.publishIntegrationEventReceived,
+            recordDeliveryOnly: webhookOptions.recordDeliveryOnly,
+            getIntegrationConnectionById: webhookOptions.getIntegrationConnectionById,
+            processor: webhookProcessor
+        })
+    ] : [];
     const routes = options.routes ? [
         createJiraIntegrationRoutes({
             jira,
-            connectionCapabilities: [],
-            ...options.routes
-        })
+            connectionCapabilities: adapters.agent_tools ? [
+                'agent_tools'
+            ] : [],
+            ...options.routes,
+            registerJiraWebhook: (input)=>registerJiraWebhook({
+                    jira,
+                    connectionId: input.connectionId,
+                    cloudId: input.cloudId,
+                    accessToken: input.accessToken,
+                    webhookUrl: jiraWebhookUrl(input.connectionId),
+                    ...input.withRegistrationLock ? {
+                        withRegistrationLock: input.withRegistrationLock
+                    } : {},
+                    ...input.onRegistrationSuccess ? {
+                        onRegistrationSuccess: input.onRegistrationSuccess
+                    } : {},
+                    ...input.onRegistrationFailure ? {
+                        onRegistrationFailure: input.onRegistrationFailure
+                    } : {}
+                }).then(()=>undefined)
+        }),
+        ...webhookRoutes
     ] : [];
     return {
         provider: JIRA_PROVIDER,
         displayName: 'Jira',
-        adapters: {},
+        adapters,
         async connectionExternalUrl (connection) {
             return (await getInstallationByConnectionId(connection.id))?.siteUrl;
         },
-        routes
+        routes,
+        webhookProcessors: webhookProcessor ? [
+            {
+                routeIds: [
+                    'jira'
+                ],
+                processor: webhookProcessor
+            }
+        ] : undefined
+    };
+}
+function jiraWebhookUrl(connectionId) {
+    return `${config.JIRA_WEBHOOK_BASE_URL.replace(TRAILING_SLASHES_RE, '')}${JIRA_WEBHOOK_ROUTE_PREFIX}/${connectionId}`;
+}
+function toJiraWebhookOptions(routes) {
+    if (!routes) return undefined;
+    if (routes.coreDb === undefined || routes.publishIntegrationEventReceived === undefined || routes.recordDeliveryOnly === undefined || routes.getIntegrationConnectionById === undefined) throw new Error('Jira integration provider requires all webhook receiver dependencies: coreDb, publishIntegrationEventReceived, recordDeliveryOnly, and getIntegrationConnectionById');
+    return {
+        coreDb: routes.coreDb,
+        publishIntegrationEventReceived: routes.publishIntegrationEventReceived,
+        recordDeliveryOnly: routes.recordDeliveryOnly,
+        getIntegrationConnectionById: routes.getIntegrationConnectionById
     };
 }
 

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import {JIRA_PROVIDER} from '@shipfox/api-integration-jira-dto';\nimport {createJiraApiClient, type JiraApiClient} from '#api/client.js';\nimport {config} from '#config.js';\nimport {closeDb, db} from '#db/db.js';\nimport {getJiraInstallationByConnectionId} from '#db/installations.js';\nimport {migrationsPath} from '#db/migrations.js';\nimport {\n  type CreateJiraIntegrationRoutesOptions,\n  createJiraIntegrationRoutes,\n} from '#presentation/routes/install.js';\n\nexport type {JiraProvider} from '@shipfox/api-integration-jira-dto';\nexport type {\n  JiraAccessibleResource,\n  JiraApiClient,\n  JiraAuthorization,\n  JiraIdentity,\n} from '#api/client.js';\nexport {createJiraApiClient, mapJiraError} from '#api/client.js';\nexport type {DisconnectJiraInstallationParams} from '#core/disconnect.js';\nexport {disconnectJiraInstallation} from '#core/disconnect.js';\nexport {\n  JiraAccessTokenMissingError,\n  JiraAuthorizationScopeMismatchError,\n  JiraConnectionAlreadyLinkedError,\n  JiraConnectionNotFoundError,\n  JiraInstallationAlreadyLinkedError,\n  JiraInstallationSiteMismatchError,\n  JiraInstallStateActorMismatchError,\n  JiraInstallStateError,\n  JiraIntegrationProviderError,\n  JiraOAuthCallbackError,\n  JiraOfflineAccessNotGrantedError,\n  JiraPendingSelectionNotFoundError,\n  JiraSiteSelectionMismatchError,\n  JiraTokenUnrefreshableError,\n} from '#core/errors.js';\nexport type {ConnectJiraInstallationInput, HandleJiraCallbackParams} from '#core/install.js';\nexport {\n  handleJiraCallback,\n  handleJiraOAuthCallbackError,\n  handleJiraSiteSelection,\n} from '#core/install.js';\nexport type {JiraPendingSelectionSecretsStore, JiraPendingSelectionStore} from '#core/pending.js';\nexport {createJiraPendingSelectionStore, jiraPendingSecretsNamespace} from '#core/pending.js';\nexport {\n  assertJiraAuthorizationScopes,\n  formatJiraOAuthScopes,\n  JIRA_OAUTH_SCOPES,\n} from '#core/scopes.js';\nexport {signJiraInstallState, verifyJiraInstallState} from '#core/state.js';\nexport type {\n  CreateJiraTokenStoreParams,\n  GetJiraAccessTokenParams,\n  JiraConnectionResolverResult,\n  JiraSecretsStore,\n  JiraTokenStore,\n  StoreJiraTokensParams,\n} from '#core/tokens.js';\nexport {createJiraTokenStore, jiraSecretsNamespace} from '#core/tokens.js';\nexport type {\n  JiraInstallation,\n  JiraInstallationStatus,\n  UpsertJiraInstallationParams,\n} from '#db/installations.js';\nexport {\n  deleteJiraInstallationByConnectionId,\n  getJiraInstallationByCloudId,\n  getJiraInstallationByConnectionId,\n  getJiraInstallationByWebhookId,\n  markJiraInstallationRevoked,\n  updateJiraInstallationTokenExpiry,\n  upsertJiraInstallation,\n  withJiraRefreshLock,\n} from '#db/installations.js';\nexport {closeDb, config, db, migrationsPath};\n\nexport interface CreateJiraIntegrationProviderOptions {\n  jira?: JiraApiClient | undefined;\n  getJiraInstallationByConnectionId?: typeof getJiraInstallationByConnectionId | undefined;\n  routes?: Omit<CreateJiraIntegrationRoutesOptions, 'jira' | 'connectionCapabilities'> | undefined;\n}\n\nexport function createJiraIntegrationProvider(options: CreateJiraIntegrationProviderOptions = {}) {\n  const jira = options.jira ?? createJiraApiClient();\n  const getInstallationByConnectionId =\n    options.getJiraInstallationByConnectionId ?? getJiraInstallationByConnectionId;\n  const routes = options.routes\n    ? [createJiraIntegrationRoutes({jira, connectionCapabilities: [], ...options.routes})]\n    : [];\n  return {\n    provider: JIRA_PROVIDER,\n    displayName: 'Jira',\n    adapters: {},\n    async connectionExternalUrl(connection: {id: string}): Promise<string | undefined> {\n      return (await getInstallationByConnectionId(connection.id))?.siteUrl;\n    },\n    routes,\n  };\n}\n"],"names":["JIRA_PROVIDER","createJiraApiClient","config","closeDb","db","getJiraInstallationByConnectionId","migrationsPath","createJiraIntegrationRoutes","mapJiraError","disconnectJiraInstallation","JiraAccessTokenMissingError","JiraAuthorizationScopeMismatchError","JiraConnectionAlreadyLinkedError","JiraConnectionNotFoundError","JiraInstallationAlreadyLinkedError","JiraInstallationSiteMismatchError","JiraInstallStateActorMismatchError","JiraInstallStateError","JiraIntegrationProviderError","JiraOAuthCallbackError","JiraOfflineAccessNotGrantedError","JiraPendingSelectionNotFoundError","JiraSiteSelectionMismatchError","JiraTokenUnrefreshableError","handleJiraCallback","handleJiraOAuthCallbackError","handleJiraSiteSelection","createJiraPendingSelectionStore","jiraPendingSecretsNamespace","assertJiraAuthorizationScopes","formatJiraOAuthScopes","JIRA_OAUTH_SCOPES","signJiraInstallState","verifyJiraInstallState","createJiraTokenStore","jiraSecretsNamespace","deleteJiraInstallationByConnectionId","getJiraInstallationByCloudId","getJiraInstallationByWebhookId","markJiraInstallationRevoked","updateJiraInstallationTokenExpiry","upsertJiraInstallation","withJiraRefreshLock","createJiraIntegrationProvider","options","jira","getInstallationByConnectionId","routes","connectionCapabilities","provider","displayName","adapters","connectionExternalUrl","connection","id","siteUrl"],"mappings":"AAAA,SAAQA,aAAa,QAAO,oCAAoC;AAChE,SAAQC,mBAAmB,QAA2B,iBAAiB;AACvE,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,OAAO,EAAEC,EAAE,QAAO,YAAY;AACtC,SAAQC,iCAAiC,QAAO,uBAAuB;AACvE,SAAQC,cAAc,QAAO,oBAAoB;AACjD,SAEEC,2BAA2B,QACtB,kCAAkC;AASzC,SAAQN,mBAAmB,EAAEO,YAAY,QAAO,iBAAiB;AAEjE,SAAQC,0BAA0B,QAAO,sBAAsB;AAC/D,SACEC,2BAA2B,EAC3BC,mCAAmC,EACnCC,gCAAgC,EAChCC,2BAA2B,EAC3BC,kCAAkC,EAClCC,iCAAiC,EACjCC,kCAAkC,EAClCC,qBAAqB,EACrBC,4BAA4B,EAC5BC,sBAAsB,EACtBC,gCAAgC,EAChCC,iCAAiC,EACjCC,8BAA8B,EAC9BC,2BAA2B,QACtB,kBAAkB;AAEzB,SACEC,kBAAkB,EAClBC,4BAA4B,EAC5BC,uBAAuB,QAClB,mBAAmB;AAE1B,SAAQC,+BAA+B,EAAEC,2BAA2B,QAAO,mBAAmB;AAC9F,SACEC,6BAA6B,EAC7BC,qBAAqB,EACrBC,iBAAiB,QACZ,kBAAkB;AACzB,SAAQC,oBAAoB,EAAEC,sBAAsB,QAAO,iBAAiB;AAS5E,SAAQC,oBAAoB,EAAEC,oBAAoB,QAAO,kBAAkB;AAM3E,SACEC,oCAAoC,EACpCC,4BAA4B,EAC5BhC,iCAAiC,EACjCiC,8BAA8B,EAC9BC,2BAA2B,EAC3BC,iCAAiC,EACjCC,sBAAsB,EACtBC,mBAAmB,QACd,uBAAuB;AAC9B,SAAQvC,OAAO,EAAED,MAAM,EAAEE,EAAE,EAAEE,cAAc,GAAE;AAQ7C,OAAO,SAASqC,8BAA8BC,UAAgD,CAAC,CAAC;IAC9F,MAAMC,OAAOD,QAAQC,IAAI,IAAI5C;IAC7B,MAAM6C,gCACJF,QAAQvC,iCAAiC,IAAIA;IAC/C,MAAM0C,SAASH,QAAQG,MAAM,GACzB;QAACxC,4BAA4B;YAACsC;YAAMG,wBAAwB,EAAE;YAAE,GAAGJ,QAAQG,MAAM;QAAA;KAAG,GACpF,EAAE;IACN,OAAO;QACLE,UAAUjD;QACVkD,aAAa;QACbC,UAAU,CAAC;QACX,MAAMC,uBAAsBC,UAAwB;YAClD,OAAQ,CAAA,MAAMP,8BAA8BO,WAAWC,EAAE,CAAA,GAAIC;QAC/D;QACAR;IACF;AACF"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import {JIRA_PROVIDER} from '@shipfox/api-integration-jira-dto';\nimport {\n  createJiraAgentToolsClient,\n  createJiraApiClient,\n  type JiraAgentToolsClient,\n  type JiraApiClient,\n} from '#api/client.js';\nimport {config} from '#config.js';\nimport {JiraAgentToolsProvider} from '#core/agent-tools-provider.js';\nimport type {JiraTokenStore} from '#core/tokens.js';\nimport {createJiraWebhookProcessor} from '#core/webhook-processor.js';\nimport {registerJiraWebhook} from '#core/webhook-registration.js';\nimport {closeDb, db} from '#db/db.js';\nimport {getJiraInstallationByConnectionId} from '#db/installations.js';\nimport {migrationsPath} from '#db/migrations.js';\nimport {\n  type CreateJiraIntegrationRoutesOptions,\n  createJiraIntegrationRoutes,\n} from '#presentation/routes/install.js';\nimport {\n  type CreateJiraWebhookRoutesOptions,\n  createJiraWebhookRoutes,\n  JIRA_WEBHOOK_ROUTE_PREFIX,\n} from '#presentation/routes/webhooks.js';\n\nconst TRAILING_SLASHES_RE = /\\/+$/;\n\nexport type {JiraProvider} from '@shipfox/api-integration-jira-dto';\nexport type {\n  JiraAccessibleResource,\n  JiraAgentToolHttpMethod,\n  JiraAgentToolQueryValue,\n  JiraAgentToolRequest,\n  JiraAgentToolResponse,\n  JiraAgentToolsClient,\n  JiraApiClient,\n  JiraAuthorization,\n  JiraDynamicWebhookRegistration,\n  JiraIdentity,\n} from '#api/client.js';\nexport {\n  createJiraAgentToolsClient,\n  createJiraApiClient,\n  JIRA_DYNAMIC_WEBHOOK_EVENTS,\n  JIRA_DYNAMIC_WEBHOOK_JQL,\n  mapJiraError,\n} from '#api/client.js';\nexport type {\n  JiraAgentToolCatalogEntry,\n  JiraAgentToolId,\n  JiraAgentToolRequiredScope,\n} from '#core/agent-tools.js';\nexport {\n  jiraAgentToolCatalog,\n  jiraAgentToolSelectionCatalog,\n  jiraPlainTextToAdf,\n} from '#core/agent-tools.js';\nexport type {\n  JiraAgentToolsProviderOptions,\n  JiraToolCallResult,\n} from '#core/agent-tools-provider.js';\nexport {JiraAgentToolsProvider} from '#core/agent-tools-provider.js';\nexport type {DisconnectJiraInstallationParams} from '#core/disconnect.js';\nexport {disconnectJiraInstallation} from '#core/disconnect.js';\nexport {\n  JiraAccessTokenMissingError,\n  JiraAuthorizationScopeMismatchError,\n  JiraConnectionAlreadyLinkedError,\n  JiraConnectionNotFoundError,\n  JiraInstallationAlreadyLinkedError,\n  JiraInstallationSiteMismatchError,\n  JiraInstallStateActorMismatchError,\n  JiraInstallStateError,\n  JiraIntegrationProviderError,\n  JiraOAuthCallbackError,\n  JiraOfflineAccessNotGrantedError,\n  JiraPendingSelectionNotFoundError,\n  JiraSiteSelectionMismatchError,\n  JiraTokenUnrefreshableError,\n} from '#core/errors.js';\nexport type {ConnectJiraInstallationInput, HandleJiraCallbackParams} from '#core/install.js';\nexport {\n  handleJiraCallback,\n  handleJiraOAuthCallbackError,\n  handleJiraSiteSelection,\n} from '#core/install.js';\nexport type {JiraPendingSelectionSecretsStore, JiraPendingSelectionStore} from '#core/pending.js';\nexport {createJiraPendingSelectionStore, jiraPendingSecretsNamespace} from '#core/pending.js';\nexport {\n  assertJiraAuthorizationScopes,\n  formatJiraOAuthScopes,\n  JIRA_OAUTH_SCOPES,\n} from '#core/scopes.js';\nexport {signJiraInstallState, verifyJiraInstallState} from '#core/state.js';\nexport type {\n  CreateJiraTokenStoreParams,\n  GetJiraAccessTokenParams,\n  JiraConnectionResolverResult,\n  JiraSecretsStore,\n  JiraTokenStore,\n  StoreJiraTokensParams,\n} from '#core/tokens.js';\nexport {createJiraTokenStore, jiraSecretsNamespace} from '#core/tokens.js';\nexport type {\n  CreateJiraWebhookProcessorOptions,\n  JiraWebhookProcessor,\n} from '#core/webhook-processor.js';\nexport {createJiraWebhookProcessor} from '#core/webhook-processor.js';\nexport type {RegisterJiraWebhookParams} from '#core/webhook-registration.js';\nexport {JIRA_WEBHOOK_TTL_MS, registerJiraWebhook} from '#core/webhook-registration.js';\nexport type {\n  JiraInstallation,\n  JiraInstallationLock,\n  JiraInstallationStatus,\n  UpdateJiraInstallationWebhookParams,\n  UpsertJiraInstallationParams,\n} from '#db/installations.js';\nexport {\n  deleteJiraInstallationByConnectionId,\n  getJiraInstallationByCloudId,\n  getJiraInstallationByConnectionId,\n  getJiraInstallationByWebhookId,\n  listJiraInstallationsDueForTokenRefresh,\n  markJiraInstallationRevoked,\n  updateJiraInstallationTokenExpiry,\n  updateJiraInstallationWebhook,\n  upsertJiraInstallation,\n  withJiraRefreshLock,\n  withJiraWebhookRegistrationLock,\n} from '#db/installations.js';\nexport type {CreateJiraWebhookRoutesOptions} from '#presentation/routes/webhooks.js';\nexport {createJiraWebhookRoutes} from '#presentation/routes/webhooks.js';\nexport {createJiraMaintenanceWorker} from '#temporal/worker.js';\nexport {closeDb, config, db, migrationsPath};\n\nexport interface CreateJiraIntegrationProviderOptions {\n  jira?: JiraApiClient | undefined;\n  agentTools?:\n    | {\n        tokenStore: Pick<JiraTokenStore, 'getAccessToken'>;\n        jira?: JiraAgentToolsClient | undefined;\n      }\n    | undefined;\n  getJiraInstallationByConnectionId?: typeof getJiraInstallationByConnectionId | undefined;\n  routes?: JiraIntegrationProviderRoutesOptions | undefined;\n}\n\ntype JiraIntegrationProviderRoutesOptions = Omit<\n  CreateJiraIntegrationRoutesOptions,\n  'jira' | 'connectionCapabilities' | 'registerJiraWebhook'\n> &\n  Omit<CreateJiraWebhookRoutesOptions, 'processor'>;\n\nexport function createJiraIntegrationProvider(options: CreateJiraIntegrationProviderOptions = {}) {\n  const jira = options.jira ?? createJiraApiClient();\n  const getInstallationByConnectionId =\n    options.getJiraInstallationByConnectionId ?? getJiraInstallationByConnectionId;\n  const adapters = options.agentTools\n    ? {\n        agent_tools: new JiraAgentToolsProvider({\n          jira: options.agentTools.jira ?? createJiraAgentToolsClient(),\n          tokenStore: options.agentTools.tokenStore,\n        }),\n      }\n    : {};\n  const webhookOptions = toJiraWebhookOptions(options.routes);\n  const webhookProcessor = webhookOptions ? createJiraWebhookProcessor(webhookOptions) : undefined;\n  const webhookRoutes = webhookOptions\n    ? [\n        createJiraWebhookRoutes({\n          coreDb: webhookOptions.coreDb,\n          publishIntegrationEventReceived: webhookOptions.publishIntegrationEventReceived,\n          recordDeliveryOnly: webhookOptions.recordDeliveryOnly,\n          getIntegrationConnectionById: webhookOptions.getIntegrationConnectionById,\n          processor: webhookProcessor,\n        }),\n      ]\n    : [];\n  const routes = options.routes\n    ? [\n        createJiraIntegrationRoutes({\n          jira,\n          connectionCapabilities: adapters.agent_tools ? ['agent_tools'] : [],\n          ...options.routes,\n          registerJiraWebhook: (input) =>\n            registerJiraWebhook({\n              jira,\n              connectionId: input.connectionId,\n              cloudId: input.cloudId,\n              accessToken: input.accessToken,\n              webhookUrl: jiraWebhookUrl(input.connectionId),\n              ...(input.withRegistrationLock\n                ? {withRegistrationLock: input.withRegistrationLock}\n                : {}),\n              ...(input.onRegistrationSuccess\n                ? {onRegistrationSuccess: input.onRegistrationSuccess}\n                : {}),\n              ...(input.onRegistrationFailure\n                ? {onRegistrationFailure: input.onRegistrationFailure}\n                : {}),\n            }).then(() => undefined),\n        }),\n        ...webhookRoutes,\n      ]\n    : [];\n  return {\n    provider: JIRA_PROVIDER,\n    displayName: 'Jira',\n    adapters,\n    async connectionExternalUrl(connection: {id: string}): Promise<string | undefined> {\n      return (await getInstallationByConnectionId(connection.id))?.siteUrl;\n    },\n    routes,\n    webhookProcessors: webhookProcessor\n      ? [{routeIds: ['jira'] as const, processor: webhookProcessor}]\n      : undefined,\n  };\n}\n\nfunction jiraWebhookUrl(connectionId: string): string {\n  return `${config.JIRA_WEBHOOK_BASE_URL.replace(TRAILING_SLASHES_RE, '')}${JIRA_WEBHOOK_ROUTE_PREFIX}/${connectionId}`;\n}\n\nfunction toJiraWebhookOptions(\n  routes: CreateJiraIntegrationProviderOptions['routes'],\n): CreateJiraWebhookRoutesOptions | undefined {\n  if (!routes) return undefined;\n  if (\n    routes.coreDb === undefined ||\n    routes.publishIntegrationEventReceived === undefined ||\n    routes.recordDeliveryOnly === undefined ||\n    routes.getIntegrationConnectionById === undefined\n  )\n    throw new Error(\n      'Jira integration provider requires all webhook receiver dependencies: coreDb, publishIntegrationEventReceived, recordDeliveryOnly, and getIntegrationConnectionById',\n    );\n  return {\n    coreDb: routes.coreDb,\n    publishIntegrationEventReceived: routes.publishIntegrationEventReceived,\n    recordDeliveryOnly: routes.recordDeliveryOnly,\n    getIntegrationConnectionById: routes.getIntegrationConnectionById,\n  };\n}\n"],"names":["JIRA_PROVIDER","createJiraAgentToolsClient","createJiraApiClient","config","JiraAgentToolsProvider","createJiraWebhookProcessor","registerJiraWebhook","closeDb","db","getJiraInstallationByConnectionId","migrationsPath","createJiraIntegrationRoutes","createJiraWebhookRoutes","JIRA_WEBHOOK_ROUTE_PREFIX","TRAILING_SLASHES_RE","JIRA_DYNAMIC_WEBHOOK_EVENTS","JIRA_DYNAMIC_WEBHOOK_JQL","mapJiraError","jiraAgentToolCatalog","jiraAgentToolSelectionCatalog","jiraPlainTextToAdf","disconnectJiraInstallation","JiraAccessTokenMissingError","JiraAuthorizationScopeMismatchError","JiraConnectionAlreadyLinkedError","JiraConnectionNotFoundError","JiraInstallationAlreadyLinkedError","JiraInstallationSiteMismatchError","JiraInstallStateActorMismatchError","JiraInstallStateError","JiraIntegrationProviderError","JiraOAuthCallbackError","JiraOfflineAccessNotGrantedError","JiraPendingSelectionNotFoundError","JiraSiteSelectionMismatchError","JiraTokenUnrefreshableError","handleJiraCallback","handleJiraOAuthCallbackError","handleJiraSiteSelection","createJiraPendingSelectionStore","jiraPendingSecretsNamespace","assertJiraAuthorizationScopes","formatJiraOAuthScopes","JIRA_OAUTH_SCOPES","signJiraInstallState","verifyJiraInstallState","createJiraTokenStore","jiraSecretsNamespace","JIRA_WEBHOOK_TTL_MS","deleteJiraInstallationByConnectionId","getJiraInstallationByCloudId","getJiraInstallationByWebhookId","listJiraInstallationsDueForTokenRefresh","markJiraInstallationRevoked","updateJiraInstallationTokenExpiry","updateJiraInstallationWebhook","upsertJiraInstallation","withJiraRefreshLock","withJiraWebhookRegistrationLock","createJiraMaintenanceWorker","createJiraIntegrationProvider","options","jira","getInstallationByConnectionId","adapters","agentTools","agent_tools","tokenStore","webhookOptions","toJiraWebhookOptions","routes","webhookProcessor","undefined","webhookRoutes","coreDb","publishIntegrationEventReceived","recordDeliveryOnly","getIntegrationConnectionById","processor","connectionCapabilities","input","connectionId","cloudId","accessToken","webhookUrl","jiraWebhookUrl","withRegistrationLock","onRegistrationSuccess","onRegistrationFailure","then","provider","displayName","connectionExternalUrl","connection","id","siteUrl","webhookProcessors","routeIds","JIRA_WEBHOOK_BASE_URL","replace","Error"],"mappings":"AAAA,SAAQA,aAAa,QAAO,oCAAoC;AAChE,SACEC,0BAA0B,EAC1BC,mBAAmB,QAGd,iBAAiB;AACxB,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,sBAAsB,QAAO,gCAAgC;AAErE,SAAQC,0BAA0B,QAAO,6BAA6B;AACtE,SAAQC,mBAAmB,QAAO,gCAAgC;AAClE,SAAQC,OAAO,EAAEC,EAAE,QAAO,YAAY;AACtC,SAAQC,iCAAiC,QAAO,uBAAuB;AACvE,SAAQC,cAAc,QAAO,oBAAoB;AACjD,SAEEC,2BAA2B,QACtB,kCAAkC;AACzC,SAEEC,uBAAuB,EACvBC,yBAAyB,QACpB,mCAAmC;AAE1C,MAAMC,sBAAsB;AAe5B,SACEb,0BAA0B,EAC1BC,mBAAmB,EACnBa,2BAA2B,EAC3BC,wBAAwB,EACxBC,YAAY,QACP,iBAAiB;AAMxB,SACEC,oBAAoB,EACpBC,6BAA6B,EAC7BC,kBAAkB,QACb,uBAAuB;AAK9B,SAAQhB,sBAAsB,QAAO,gCAAgC;AAErE,SAAQiB,0BAA0B,QAAO,sBAAsB;AAC/D,SACEC,2BAA2B,EAC3BC,mCAAmC,EACnCC,gCAAgC,EAChCC,2BAA2B,EAC3BC,kCAAkC,EAClCC,iCAAiC,EACjCC,kCAAkC,EAClCC,qBAAqB,EACrBC,4BAA4B,EAC5BC,sBAAsB,EACtBC,gCAAgC,EAChCC,iCAAiC,EACjCC,8BAA8B,EAC9BC,2BAA2B,QACtB,kBAAkB;AAEzB,SACEC,kBAAkB,EAClBC,4BAA4B,EAC5BC,uBAAuB,QAClB,mBAAmB;AAE1B,SAAQC,+BAA+B,EAAEC,2BAA2B,QAAO,mBAAmB;AAC9F,SACEC,6BAA6B,EAC7BC,qBAAqB,EACrBC,iBAAiB,QACZ,kBAAkB;AACzB,SAAQC,oBAAoB,EAAEC,sBAAsB,QAAO,iBAAiB;AAS5E,SAAQC,oBAAoB,EAAEC,oBAAoB,QAAO,kBAAkB;AAK3E,SAAQ1C,0BAA0B,QAAO,6BAA6B;AAEtE,SAAQ2C,mBAAmB,EAAE1C,mBAAmB,QAAO,gCAAgC;AAQvF,SACE2C,oCAAoC,EACpCC,4BAA4B,EAC5BzC,iCAAiC,EACjC0C,8BAA8B,EAC9BC,uCAAuC,EACvCC,2BAA2B,EAC3BC,iCAAiC,EACjCC,6BAA6B,EAC7BC,sBAAsB,EACtBC,mBAAmB,EACnBC,+BAA+B,QAC1B,uBAAuB;AAE9B,SAAQ9C,uBAAuB,QAAO,mCAAmC;AACzE,SAAQ+C,2BAA2B,QAAO,sBAAsB;AAChE,SAAQpD,OAAO,EAAEJ,MAAM,EAAEK,EAAE,EAAEE,cAAc,GAAE;AAoB7C,OAAO,SAASkD,8BAA8BC,UAAgD,CAAC,CAAC;IAC9F,MAAMC,OAAOD,QAAQC,IAAI,IAAI5D;IAC7B,MAAM6D,gCACJF,QAAQpD,iCAAiC,IAAIA;IAC/C,MAAMuD,WAAWH,QAAQI,UAAU,GAC/B;QACEC,aAAa,IAAI9D,uBAAuB;YACtC0D,MAAMD,QAAQI,UAAU,CAACH,IAAI,IAAI7D;YACjCkE,YAAYN,QAAQI,UAAU,CAACE,UAAU;QAC3C;IACF,IACA,CAAC;IACL,MAAMC,iBAAiBC,qBAAqBR,QAAQS,MAAM;IAC1D,MAAMC,mBAAmBH,iBAAiB/D,2BAA2B+D,kBAAkBI;IACvF,MAAMC,gBAAgBL,iBAClB;QACExD,wBAAwB;YACtB8D,QAAQN,eAAeM,MAAM;YAC7BC,iCAAiCP,eAAeO,+BAA+B;YAC/EC,oBAAoBR,eAAeQ,kBAAkB;YACrDC,8BAA8BT,eAAeS,4BAA4B;YACzEC,WAAWP;QACb;KACD,GACD,EAAE;IACN,MAAMD,SAAST,QAAQS,MAAM,GACzB;QACE3D,4BAA4B;YAC1BmD;YACAiB,wBAAwBf,SAASE,WAAW,GAAG;gBAAC;aAAc,GAAG,EAAE;YACnE,GAAGL,QAAQS,MAAM;YACjBhE,qBAAqB,CAAC0E,QACpB1E,oBAAoB;oBAClBwD;oBACAmB,cAAcD,MAAMC,YAAY;oBAChCC,SAASF,MAAME,OAAO;oBACtBC,aAAaH,MAAMG,WAAW;oBAC9BC,YAAYC,eAAeL,MAAMC,YAAY;oBAC7C,GAAID,MAAMM,oBAAoB,GAC1B;wBAACA,sBAAsBN,MAAMM,oBAAoB;oBAAA,IACjD,CAAC,CAAC;oBACN,GAAIN,MAAMO,qBAAqB,GAC3B;wBAACA,uBAAuBP,MAAMO,qBAAqB;oBAAA,IACnD,CAAC,CAAC;oBACN,GAAIP,MAAMQ,qBAAqB,GAC3B;wBAACA,uBAAuBR,MAAMQ,qBAAqB;oBAAA,IACnD,CAAC,CAAC;gBACR,GAAGC,IAAI,CAAC,IAAMjB;QAClB;WACGC;KACJ,GACD,EAAE;IACN,OAAO;QACLiB,UAAU1F;QACV2F,aAAa;QACb3B;QACA,MAAM4B,uBAAsBC,UAAwB;YAClD,OAAQ,CAAA,MAAM9B,8BAA8B8B,WAAWC,EAAE,CAAA,GAAIC;QAC/D;QACAzB;QACA0B,mBAAmBzB,mBACf;YAAC;gBAAC0B,UAAU;oBAAC;iBAAO;gBAAWnB,WAAWP;YAAgB;SAAE,GAC5DC;IACN;AACF;AAEA,SAASa,eAAeJ,YAAoB;IAC1C,OAAO,GAAG9E,OAAO+F,qBAAqB,CAACC,OAAO,CAACrF,qBAAqB,MAAMD,0BAA0B,CAAC,EAAEoE,cAAc;AACvH;AAEA,SAASZ,qBACPC,MAAsD;IAEtD,IAAI,CAACA,QAAQ,OAAOE;IACpB,IACEF,OAAOI,MAAM,KAAKF,aAClBF,OAAOK,+BAA+B,KAAKH,aAC3CF,OAAOM,kBAAkB,KAAKJ,aAC9BF,OAAOO,4BAA4B,KAAKL,WAExC,MAAM,IAAI4B,MACR;IAEJ,OAAO;QACL1B,QAAQJ,OAAOI,MAAM;QACrBC,iCAAiCL,OAAOK,+BAA+B;QACvEC,oBAAoBN,OAAOM,kBAAkB;QAC7CC,8BAA8BP,OAAOO,4BAA4B;IACnE;AACF"}

package/dist/presentation/routes/install.d.ts

@@ -4,6 +4,7 @@ import type { JiraApiClient } from '#api/client.js';
 import { type ConnectJiraInstallationInput } from '#core/install.js';
 import type { JiraPendingSelectionStore } from '#core/pending.js';
 import type { JiraTokenStore } from '#core/tokens.js';
+import type { JiraInstallationLock } from '#db/installations.js';
 export interface CreateJiraIntegrationRoutesOptions {
     jira: JiraApiClient;
     tokenStore: Pick<JiraTokenStore, 'storeTokens'>;
@@ -12,6 +13,27 @@ export interface CreateJiraIntegrationRoutesOptions {
         cloudId: string;
     }): Promise<IntegrationConnection<'jira'> | undefined>;
     connectJiraInstallation(input: ConnectJiraInstallationInput): Promise<IntegrationConnection<'jira'>>;
+    registerJiraWebhook(input: {
+        connectionId: string;
+        cloudId: string;
+        accessToken: string;
+        withRegistrationLock?: JiraInstallationLock;
+        onRegistrationSuccess: (input: {
+            tx?: unknown;
+        }) => Promise<void>;
+        onRegistrationFailure: (input: {
+            tx?: unknown;
+        }) => Promise<void>;
+    }): Promise<void>;
+    withJiraInstallationLock?: JiraInstallationLock;
+    markConnectionActive(input: {
+        connectionId: string;
+        tx?: unknown;
+    }): Promise<void>;
+    markConnectionError(input: {
+        connectionId: string;
+        tx?: unknown;
+    }): Promise<void>;
     disconnectJiraInstallation(input: {
         connectionId: string;
     }): Promise<void>;

package/dist/presentation/routes/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/install.ts"],"names":[],"mappings":"AASA,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAE3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAc,KAAK,UAAU,EAAC,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,gBAAgB,CAAC;AAElD,OAAO,EACL,KAAK,4BAA4B,EAIlC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,kBAAkB,CAAC;AAGhE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,iBAAiB,CAAC;AAIpD,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IAChD,YAAY,EAAE,IAAI,CAAC,yBAAyB,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACzE,yBAAyB,CAAC,KAAK,EAAE;QAC/B,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC;IACvD,uBAAuB,CACrB,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,0BAA0B,CAAC,KAAK,EAAE;QAAC,YAAY,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,sBAAsB,EAAE,qBAAqB,EAAE,CAAC;IAChD,gCAAgC,CAAC,EAAE,CAAC,KAAK,EAAE;QACzC,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,aAAa,CAAC,OAAO,2BAA2B,EAAE,qBAAqB,CAAC,CAAC;KACvF,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxB;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,kCAAkC,GAC1C,UAAU,CA6FZ"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/install.ts"],"names":[],"mappings":"AASA,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAE3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAc,KAAK,UAAU,EAAC,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,gBAAgB,CAAC;AAElD,OAAO,EACL,KAAK,4BAA4B,EAIlC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,kBAAkB,CAAC;AAGhE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAC,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAI/D,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IAChD,YAAY,EAAE,IAAI,CAAC,yBAAyB,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACzE,yBAAyB,CAAC,KAAK,EAAE;QAC/B,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC;IACvD,uBAAuB,CACrB,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,mBAAmB,CAAC,KAAK,EAAE;QACzB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;QAC5C,qBAAqB,EAAE,CAAC,KAAK,EAAE;YAAC,EAAE,CAAC,EAAE,OAAO,CAAA;SAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAChE,qBAAqB,EAAE,CAAC,KAAK,EAAE;YAAC,EAAE,CAAC,EAAE,OAAO,CAAA;SAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KACjE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,wBAAwB,CAAC,EAAE,oBAAoB,CAAC;IAChD,oBAAoB,CAAC,KAAK,EAAE;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,OAAO,CAAA;KAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF,mBAAmB,CAAC,KAAK,EAAE;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,OAAO,CAAA;KAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,0BAA0B,CAAC,KAAK,EAAE;QAAC,YAAY,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,sBAAsB,EAAE,qBAAqB,EAAE,CAAC;IAChD,gCAAgC,CAAC,EAAE,CAAC,KAAK,EAAE;QACzC,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,aAAa,CAAC,OAAO,2BAA2B,EAAE,qBAAqB,CAAC,CAAC;KACvF,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxB;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,kCAAkC,GAC1C,UAAU,CA6FZ"}

package/dist/presentation/routes/install.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/install.ts"],"sourcesContent":["import {AUTH_USER, requireUserContext, requireWorkspaceAccess} from '@shipfox/api-auth-context';\nimport {\n  completeJiraSiteSelectionBodySchema,\n  createJiraInstallBodySchema,\n  createJiraInstallResponseSchema,\n  type JiraCallbackQueryDto,\n  jiraCallbackQuerySchema,\n  jiraCallbackResponseSchema,\n} from '@shipfox/api-integration-jira-dto';\nimport {\n  type IntegrationCapability,\n  type IntegrationConnection,\n  integrationConnectionDtoSchema,\n} from '@shipfox/api-integration-spi';\nimport {defineRoute, type RouteGroup} from '@shipfox/node-fastify';\nimport type {JiraApiClient} from '#api/client.js';\nimport {config} from '#config.js';\nimport {\n  type ConnectJiraInstallationInput,\n  handleJiraCallback,\n  handleJiraOAuthCallbackError,\n  handleJiraSiteSelection,\n} from '#core/install.js';\nimport type {JiraPendingSelectionStore} from '#core/pending.js';\nimport {formatJiraOAuthScopes} from '#core/scopes.js';\nimport {signJiraInstallState} from '#core/state.js';\nimport type {JiraTokenStore} from '#core/tokens.js';\nimport {toIntegrationConnectionDto} from '#presentation/dto/integrations.js';\nimport {jiraRouteErrorHandler} from './errors.js';\n\nexport interface CreateJiraIntegrationRoutesOptions {\n  jira: JiraApiClient;\n  tokenStore: Pick<JiraTokenStore, 'storeTokens'>;\n  pendingStore: Pick<JiraPendingSelectionStore, 'save' | 'load' | 'clear'>;\n  getExistingJiraConnection(input: {\n    cloudId: string;\n  }): Promise<IntegrationConnection<'jira'> | undefined>;\n  connectJiraInstallation(\n    input: ConnectJiraInstallationInput,\n  ): Promise<IntegrationConnection<'jira'>>;\n  disconnectJiraInstallation(input: {connectionId: string}): Promise<void>;\n  connectionCapabilities: IntegrationCapability[];\n  requireActiveWorkspaceMembership?: (input: {\n    workspaceId: string;\n    userId: string;\n    memberships: ReadonlyArray<import('@shipfox/api-auth-context').UserContextMembership>;\n  }) => Promise<unknown>;\n}\n\nexport function createJiraIntegrationRoutes(\n  options: CreateJiraIntegrationRoutesOptions,\n): RouteGroup {\n  const requireMembership =\n    options.requireActiveWorkspaceMembership ?? unavailableWorkspaceMembershipCheck;\n  const installRoute = defineRoute({\n    method: 'POST',\n    path: '/install',\n    auth: AUTH_USER,\n    description: 'Create a Jira OAuth authorization URL for a workspace.',\n    schema: {body: createJiraInstallBodySchema, response: {200: createJiraInstallResponseSchema}},\n    handler: (request) => {\n      const {workspace_id: workspaceId} = request.body;\n      const actor = requireUserContext(request);\n      requireWorkspaceAccess({request, workspaceId});\n      const installUrl = new URL(`${config.JIRA_AUTH_BASE_URL}/authorize`);\n      installUrl.searchParams.set('audience', 'api.atlassian.com');\n      installUrl.searchParams.set('client_id', config.JIRA_OAUTH_CLIENT_ID);\n      installUrl.searchParams.set('scope', formatJiraOAuthScopes());\n      installUrl.searchParams.set('redirect_uri', config.JIRA_OAUTH_REDIRECT_URL);\n      installUrl.searchParams.set(\n        'state',\n        signJiraInstallState({workspaceId, userId: actor.userId}),\n      );\n      installUrl.searchParams.set('response_type', 'code');\n      installUrl.searchParams.set('prompt', 'consent');\n      return {install_url: installUrl.toString()};\n    },\n  });\n  const callbackApiRoute = defineRoute({\n    method: 'GET',\n    path: '/callback/api',\n    auth: AUTH_USER,\n    description: 'Handle the Jira OAuth callback.',\n    schema: {querystring: jiraCallbackQuerySchema, response: {200: jiraCallbackResponseSchema}},\n    errorHandler: jiraRouteErrorHandler,\n    handler: async (request) => {\n      const actor = requireUserContext(request);\n      const query = request.query;\n      if (isJiraOAuthErrorCallback(query))\n        return await handleJiraOAuthCallbackError({\n          state: query.state,\n          error: query.error,\n          errorDescription: query.error_description,\n          sessionUserId: actor.userId,\n          sessionMemberships: actor.memberships,\n          requireWorkspaceMembership: requireMembership,\n        });\n      const result = await handleJiraCallback({\n        ...options,\n        code: query.code,\n        state: query.state,\n        sessionUserId: actor.userId,\n        sessionMemberships: actor.memberships,\n        requireWorkspaceMembership: requireMembership,\n      });\n      return 'sites' in result\n        ? {\n            sites: result.sites.map((site) => ({\n              cloud_id: site.cloudId,\n              name: site.name,\n              url: site.url,\n              scopes: site.scopes,\n            })),\n          }\n        : toIntegrationConnectionDto(result, {capabilities: options.connectionCapabilities});\n    },\n  });\n  const siteSelectionRoute = defineRoute({\n    method: 'POST',\n    path: '/callback/site',\n    auth: AUTH_USER,\n    description: 'Complete Jira OAuth site selection.',\n    schema: {\n      body: completeJiraSiteSelectionBodySchema,\n      response: {200: integrationConnectionDtoSchema},\n    },\n    errorHandler: jiraRouteErrorHandler,\n    handler: async (request) => {\n      const actor = requireUserContext(request);\n      const connection = await handleJiraSiteSelection({\n        ...options,\n        cloudId: request.body.cloud_id,\n        state: request.body.state,\n        sessionUserId: actor.userId,\n        sessionMemberships: actor.memberships,\n        requireWorkspaceMembership: requireMembership,\n      });\n      return toIntegrationConnectionDto(connection, {capabilities: options.connectionCapabilities});\n    },\n  });\n  return {\n    prefix: '/integrations/jira',\n    routes: [installRoute, callbackApiRoute, siteSelectionRoute],\n  };\n}\n\nfunction unavailableWorkspaceMembershipCheck(_input: {\n  workspaceId: string;\n  userId: string;\n  memberships: ReadonlyArray<import('@shipfox/api-auth-context').UserContextMembership>;\n}): Promise<never> {\n  return Promise.reject(new Error('Workspaces inter-module client is not configured'));\n}\n\nfunction isJiraOAuthErrorCallback(query: JiraCallbackQueryDto): query is JiraCallbackQueryDto & {\n  error: string;\n  error_description?: string | undefined;\n  state: string;\n} {\n  return 'error' in query && typeof query.error === 'string';\n}\n"],"names":["AUTH_USER","requireUserContext","requireWorkspaceAccess","completeJiraSiteSelectionBodySchema","createJiraInstallBodySchema","createJiraInstallResponseSchema","jiraCallbackQuerySchema","jiraCallbackResponseSchema","integrationConnectionDtoSchema","defineRoute","config","handleJiraCallback","handleJiraOAuthCallbackError","handleJiraSiteSelection","formatJiraOAuthScopes","signJiraInstallState","toIntegrationConnectionDto","jiraRouteErrorHandler","createJiraIntegrationRoutes","options","requireMembership","requireActiveWorkspaceMembership","unavailableWorkspaceMembershipCheck","installRoute","method","path","auth","description","schema","body","response","handler","request","workspace_id","workspaceId","actor","installUrl","URL","JIRA_AUTH_BASE_URL","searchParams","set","JIRA_OAUTH_CLIENT_ID","JIRA_OAUTH_REDIRECT_URL","userId","install_url","toString","callbackApiRoute","querystring","errorHandler","query","isJiraOAuthErrorCallback","state","error","errorDescription","error_description","sessionUserId","sessionMemberships","memberships","requireWorkspaceMembership","result","code","sites","map","site","cloud_id","cloudId","name","url","scopes","capabilities","connectionCapabilities","siteSelectionRoute","connection","prefix","routes","_input","Promise","reject","Error"],"mappings":"AAAA,SAAQA,SAAS,EAAEC,kBAAkB,EAAEC,sBAAsB,QAAO,4BAA4B;AAChG,SACEC,mCAAmC,EACnCC,2BAA2B,EAC3BC,+BAA+B,EAE/BC,uBAAuB,EACvBC,0BAA0B,QACrB,oCAAoC;AAC3C,SAGEC,8BAA8B,QACzB,+BAA+B;AACtC,SAAQC,WAAW,QAAwB,wBAAwB;AAEnE,SAAQC,MAAM,QAAO,aAAa;AAClC,SAEEC,kBAAkB,EAClBC,4BAA4B,EAC5BC,uBAAuB,QAClB,mBAAmB;AAE1B,SAAQC,qBAAqB,QAAO,kBAAkB;AACtD,SAAQC,oBAAoB,QAAO,iBAAiB;AAEpD,SAAQC,0BAA0B,QAAO,oCAAoC;AAC7E,SAAQC,qBAAqB,QAAO,cAAc;AAqBlD,OAAO,SAASC,4BACdC,OAA2C;IAE3C,MAAMC,oBACJD,QAAQE,gCAAgC,IAAIC;IAC9C,MAAMC,eAAed,YAAY;QAC/Be,QAAQ;QACRC,MAAM;QACNC,MAAM1B;QACN2B,aAAa;QACbC,QAAQ;YAACC,MAAMzB;YAA6B0B,UAAU;gBAAC,KAAKzB;YAA+B;QAAC;QAC5F0B,SAAS,CAACC;YACR,MAAM,EAACC,cAAcC,WAAW,EAAC,GAAGF,QAAQH,IAAI;YAChD,MAAMM,QAAQlC,mBAAmB+B;YACjC9B,uBAAuB;gBAAC8B;gBAASE;YAAW;YAC5C,MAAME,aAAa,IAAIC,IAAI,GAAG3B,OAAO4B,kBAAkB,CAAC,UAAU,CAAC;YACnEF,WAAWG,YAAY,CAACC,GAAG,CAAC,YAAY;YACxCJ,WAAWG,YAAY,CAACC,GAAG,CAAC,aAAa9B,OAAO+B,oBAAoB;YACpEL,WAAWG,YAAY,CAACC,GAAG,CAAC,SAAS1B;YACrCsB,WAAWG,YAAY,CAACC,GAAG,CAAC,gBAAgB9B,OAAOgC,uBAAuB;YAC1EN,WAAWG,YAAY,CAACC,GAAG,CACzB,SACAzB,qBAAqB;gBAACmB;gBAAaS,QAAQR,MAAMQ,MAAM;YAAA;YAEzDP,WAAWG,YAAY,CAACC,GAAG,CAAC,iBAAiB;YAC7CJ,WAAWG,YAAY,CAACC,GAAG,CAAC,UAAU;YACtC,OAAO;gBAACI,aAAaR,WAAWS,QAAQ;YAAE;QAC5C;IACF;IACA,MAAMC,mBAAmBrC,YAAY;QACnCe,QAAQ;QACRC,MAAM;QACNC,MAAM1B;QACN2B,aAAa;QACbC,QAAQ;YAACmB,aAAazC;YAAyBwB,UAAU;gBAAC,KAAKvB;YAA0B;QAAC;QAC1FyC,cAAc/B;QACdc,SAAS,OAAOC;YACd,MAAMG,QAAQlC,mBAAmB+B;YACjC,MAAMiB,QAAQjB,QAAQiB,KAAK;YAC3B,IAAIC,yBAAyBD,QAC3B,OAAO,MAAMrC,6BAA6B;gBACxCuC,OAAOF,MAAME,KAAK;gBAClBC,OAAOH,MAAMG,KAAK;gBAClBC,kBAAkBJ,MAAMK,iBAAiB;gBACzCC,eAAepB,MAAMQ,MAAM;gBAC3Ba,oBAAoBrB,MAAMsB,WAAW;gBACrCC,4BAA4BtC;YAC9B;YACF,MAAMuC,SAAS,MAAMhD,mBAAmB;gBACtC,GAAGQ,OAAO;gBACVyC,MAAMX,MAAMW,IAAI;gBAChBT,OAAOF,MAAME,KAAK;gBAClBI,eAAepB,MAAMQ,MAAM;gBAC3Ba,oBAAoBrB,MAAMsB,WAAW;gBACrCC,4BAA4BtC;YAC9B;YACA,OAAO,WAAWuC,SACd;gBACEE,OAAOF,OAAOE,KAAK,CAACC,GAAG,CAAC,CAACC,OAAU,CAAA;wBACjCC,UAAUD,KAAKE,OAAO;wBACtBC,MAAMH,KAAKG,IAAI;wBACfC,KAAKJ,KAAKI,GAAG;wBACbC,QAAQL,KAAKK,MAAM;oBACrB,CAAA;YACF,IACApD,2BAA2B2C,QAAQ;gBAACU,cAAclD,QAAQmD,sBAAsB;YAAA;QACtF;IACF;IACA,MAAMC,qBAAqB9D,YAAY;QACrCe,QAAQ;QACRC,MAAM;QACNC,MAAM1B;QACN2B,aAAa;QACbC,QAAQ;YACNC,MAAM1B;YACN2B,UAAU;gBAAC,KAAKtB;YAA8B;QAChD;QACAwC,cAAc/B;QACdc,SAAS,OAAOC;YACd,MAAMG,QAAQlC,mBAAmB+B;YACjC,MAAMwC,aAAa,MAAM3D,wBAAwB;gBAC/C,GAAGM,OAAO;gBACV8C,SAASjC,QAAQH,IAAI,CAACmC,QAAQ;gBAC9Bb,OAAOnB,QAAQH,IAAI,CAACsB,KAAK;gBACzBI,eAAepB,MAAMQ,MAAM;gBAC3Ba,oBAAoBrB,MAAMsB,WAAW;gBACrCC,4BAA4BtC;YAC9B;YACA,OAAOJ,2BAA2BwD,YAAY;gBAACH,cAAclD,QAAQmD,sBAAsB;YAAA;QAC7F;IACF;IACA,OAAO;QACLG,QAAQ;QACRC,QAAQ;YAACnD;YAAcuB;YAAkByB;SAAmB;IAC9D;AACF;AAEA,SAASjD,oCAAoCqD,MAI5C;IACC,OAAOC,QAAQC,MAAM,CAAC,IAAIC,MAAM;AAClC;AAEA,SAAS5B,yBAAyBD,KAA2B;IAK3D,OAAO,WAAWA,SAAS,OAAOA,MAAMG,KAAK,KAAK;AACpD"}
+{"version":3,"sources":["../../../src/presentation/routes/install.ts"],"sourcesContent":["import {AUTH_USER, requireUserContext, requireWorkspaceAccess} from '@shipfox/api-auth-context';\nimport {\n  completeJiraSiteSelectionBodySchema,\n  createJiraInstallBodySchema,\n  createJiraInstallResponseSchema,\n  type JiraCallbackQueryDto,\n  jiraCallbackQuerySchema,\n  jiraCallbackResponseSchema,\n} from '@shipfox/api-integration-jira-dto';\nimport {\n  type IntegrationCapability,\n  type IntegrationConnection,\n  integrationConnectionDtoSchema,\n} from '@shipfox/api-integration-spi';\nimport {defineRoute, type RouteGroup} from '@shipfox/node-fastify';\nimport type {JiraApiClient} from '#api/client.js';\nimport {config} from '#config.js';\nimport {\n  type ConnectJiraInstallationInput,\n  handleJiraCallback,\n  handleJiraOAuthCallbackError,\n  handleJiraSiteSelection,\n} from '#core/install.js';\nimport type {JiraPendingSelectionStore} from '#core/pending.js';\nimport {formatJiraOAuthScopes} from '#core/scopes.js';\nimport {signJiraInstallState} from '#core/state.js';\nimport type {JiraTokenStore} from '#core/tokens.js';\nimport type {JiraInstallationLock} from '#db/installations.js';\nimport {toIntegrationConnectionDto} from '#presentation/dto/integrations.js';\nimport {jiraRouteErrorHandler} from './errors.js';\n\nexport interface CreateJiraIntegrationRoutesOptions {\n  jira: JiraApiClient;\n  tokenStore: Pick<JiraTokenStore, 'storeTokens'>;\n  pendingStore: Pick<JiraPendingSelectionStore, 'save' | 'load' | 'clear'>;\n  getExistingJiraConnection(input: {\n    cloudId: string;\n  }): Promise<IntegrationConnection<'jira'> | undefined>;\n  connectJiraInstallation(\n    input: ConnectJiraInstallationInput,\n  ): Promise<IntegrationConnection<'jira'>>;\n  registerJiraWebhook(input: {\n    connectionId: string;\n    cloudId: string;\n    accessToken: string;\n    withRegistrationLock?: JiraInstallationLock;\n    onRegistrationSuccess: (input: {tx?: unknown}) => Promise<void>;\n    onRegistrationFailure: (input: {tx?: unknown}) => Promise<void>;\n  }): Promise<void>;\n  withJiraInstallationLock?: JiraInstallationLock;\n  markConnectionActive(input: {connectionId: string; tx?: unknown}): Promise<void>;\n  markConnectionError(input: {connectionId: string; tx?: unknown}): Promise<void>;\n  disconnectJiraInstallation(input: {connectionId: string}): Promise<void>;\n  connectionCapabilities: IntegrationCapability[];\n  requireActiveWorkspaceMembership?: (input: {\n    workspaceId: string;\n    userId: string;\n    memberships: ReadonlyArray<import('@shipfox/api-auth-context').UserContextMembership>;\n  }) => Promise<unknown>;\n}\n\nexport function createJiraIntegrationRoutes(\n  options: CreateJiraIntegrationRoutesOptions,\n): RouteGroup {\n  const requireMembership =\n    options.requireActiveWorkspaceMembership ?? unavailableWorkspaceMembershipCheck;\n  const installRoute = defineRoute({\n    method: 'POST',\n    path: '/install',\n    auth: AUTH_USER,\n    description: 'Create a Jira OAuth authorization URL for a workspace.',\n    schema: {body: createJiraInstallBodySchema, response: {200: createJiraInstallResponseSchema}},\n    handler: (request) => {\n      const {workspace_id: workspaceId} = request.body;\n      const actor = requireUserContext(request);\n      requireWorkspaceAccess({request, workspaceId});\n      const installUrl = new URL(`${config.JIRA_AUTH_BASE_URL}/authorize`);\n      installUrl.searchParams.set('audience', 'api.atlassian.com');\n      installUrl.searchParams.set('client_id', config.JIRA_OAUTH_CLIENT_ID);\n      installUrl.searchParams.set('scope', formatJiraOAuthScopes());\n      installUrl.searchParams.set('redirect_uri', config.JIRA_OAUTH_REDIRECT_URL);\n      installUrl.searchParams.set(\n        'state',\n        signJiraInstallState({workspaceId, userId: actor.userId}),\n      );\n      installUrl.searchParams.set('response_type', 'code');\n      installUrl.searchParams.set('prompt', 'consent');\n      return {install_url: installUrl.toString()};\n    },\n  });\n  const callbackApiRoute = defineRoute({\n    method: 'GET',\n    path: '/callback/api',\n    auth: AUTH_USER,\n    description: 'Handle the Jira OAuth callback.',\n    schema: {querystring: jiraCallbackQuerySchema, response: {200: jiraCallbackResponseSchema}},\n    errorHandler: jiraRouteErrorHandler,\n    handler: async (request) => {\n      const actor = requireUserContext(request);\n      const query = request.query;\n      if (isJiraOAuthErrorCallback(query))\n        return await handleJiraOAuthCallbackError({\n          state: query.state,\n          error: query.error,\n          errorDescription: query.error_description,\n          sessionUserId: actor.userId,\n          sessionMemberships: actor.memberships,\n          requireWorkspaceMembership: requireMembership,\n        });\n      const result = await handleJiraCallback({\n        ...options,\n        code: query.code,\n        state: query.state,\n        sessionUserId: actor.userId,\n        sessionMemberships: actor.memberships,\n        requireWorkspaceMembership: requireMembership,\n      });\n      return 'sites' in result\n        ? {\n            sites: result.sites.map((site) => ({\n              cloud_id: site.cloudId,\n              name: site.name,\n              url: site.url,\n              scopes: site.scopes,\n            })),\n          }\n        : toIntegrationConnectionDto(result, {capabilities: options.connectionCapabilities});\n    },\n  });\n  const siteSelectionRoute = defineRoute({\n    method: 'POST',\n    path: '/callback/site',\n    auth: AUTH_USER,\n    description: 'Complete Jira OAuth site selection.',\n    schema: {\n      body: completeJiraSiteSelectionBodySchema,\n      response: {200: integrationConnectionDtoSchema},\n    },\n    errorHandler: jiraRouteErrorHandler,\n    handler: async (request) => {\n      const actor = requireUserContext(request);\n      const connection = await handleJiraSiteSelection({\n        ...options,\n        cloudId: request.body.cloud_id,\n        state: request.body.state,\n        sessionUserId: actor.userId,\n        sessionMemberships: actor.memberships,\n        requireWorkspaceMembership: requireMembership,\n      });\n      return toIntegrationConnectionDto(connection, {capabilities: options.connectionCapabilities});\n    },\n  });\n  return {\n    prefix: '/integrations/jira',\n    routes: [installRoute, callbackApiRoute, siteSelectionRoute],\n  };\n}\n\nfunction unavailableWorkspaceMembershipCheck(_input: {\n  workspaceId: string;\n  userId: string;\n  memberships: ReadonlyArray<import('@shipfox/api-auth-context').UserContextMembership>;\n}): Promise<never> {\n  return Promise.reject(new Error('Workspaces inter-module client is not configured'));\n}\n\nfunction isJiraOAuthErrorCallback(query: JiraCallbackQueryDto): query is JiraCallbackQueryDto & {\n  error: string;\n  error_description?: string | undefined;\n  state: string;\n} {\n  return 'error' in query && typeof query.error === 'string';\n}\n"],"names":["AUTH_USER","requireUserContext","requireWorkspaceAccess","completeJiraSiteSelectionBodySchema","createJiraInstallBodySchema","createJiraInstallResponseSchema","jiraCallbackQuerySchema","jiraCallbackResponseSchema","integrationConnectionDtoSchema","defineRoute","config","handleJiraCallback","handleJiraOAuthCallbackError","handleJiraSiteSelection","formatJiraOAuthScopes","signJiraInstallState","toIntegrationConnectionDto","jiraRouteErrorHandler","createJiraIntegrationRoutes","options","requireMembership","requireActiveWorkspaceMembership","unavailableWorkspaceMembershipCheck","installRoute","method","path","auth","description","schema","body","response","handler","request","workspace_id","workspaceId","actor","installUrl","URL","JIRA_AUTH_BASE_URL","searchParams","set","JIRA_OAUTH_CLIENT_ID","JIRA_OAUTH_REDIRECT_URL","userId","install_url","toString","callbackApiRoute","querystring","errorHandler","query","isJiraOAuthErrorCallback","state","error","errorDescription","error_description","sessionUserId","sessionMemberships","memberships","requireWorkspaceMembership","result","code","sites","map","site","cloud_id","cloudId","name","url","scopes","capabilities","connectionCapabilities","siteSelectionRoute","connection","prefix","routes","_input","Promise","reject","Error"],"mappings":"AAAA,SAAQA,SAAS,EAAEC,kBAAkB,EAAEC,sBAAsB,QAAO,4BAA4B;AAChG,SACEC,mCAAmC,EACnCC,2BAA2B,EAC3BC,+BAA+B,EAE/BC,uBAAuB,EACvBC,0BAA0B,QACrB,oCAAoC;AAC3C,SAGEC,8BAA8B,QACzB,+BAA+B;AACtC,SAAQC,WAAW,QAAwB,wBAAwB;AAEnE,SAAQC,MAAM,QAAO,aAAa;AAClC,SAEEC,kBAAkB,EAClBC,4BAA4B,EAC5BC,uBAAuB,QAClB,mBAAmB;AAE1B,SAAQC,qBAAqB,QAAO,kBAAkB;AACtD,SAAQC,oBAAoB,QAAO,iBAAiB;AAGpD,SAAQC,0BAA0B,QAAO,oCAAoC;AAC7E,SAAQC,qBAAqB,QAAO,cAAc;AAgClD,OAAO,SAASC,4BACdC,OAA2C;IAE3C,MAAMC,oBACJD,QAAQE,gCAAgC,IAAIC;IAC9C,MAAMC,eAAed,YAAY;QAC/Be,QAAQ;QACRC,MAAM;QACNC,MAAM1B;QACN2B,aAAa;QACbC,QAAQ;YAACC,MAAMzB;YAA6B0B,UAAU;gBAAC,KAAKzB;YAA+B;QAAC;QAC5F0B,SAAS,CAACC;YACR,MAAM,EAACC,cAAcC,WAAW,EAAC,GAAGF,QAAQH,IAAI;YAChD,MAAMM,QAAQlC,mBAAmB+B;YACjC9B,uBAAuB;gBAAC8B;gBAASE;YAAW;YAC5C,MAAME,aAAa,IAAIC,IAAI,GAAG3B,OAAO4B,kBAAkB,CAAC,UAAU,CAAC;YACnEF,WAAWG,YAAY,CAACC,GAAG,CAAC,YAAY;YACxCJ,WAAWG,YAAY,CAACC,GAAG,CAAC,aAAa9B,OAAO+B,oBAAoB;YACpEL,WAAWG,YAAY,CAACC,GAAG,CAAC,SAAS1B;YACrCsB,WAAWG,YAAY,CAACC,GAAG,CAAC,gBAAgB9B,OAAOgC,uBAAuB;YAC1EN,WAAWG,YAAY,CAACC,GAAG,CACzB,SACAzB,qBAAqB;gBAACmB;gBAAaS,QAAQR,MAAMQ,MAAM;YAAA;YAEzDP,WAAWG,YAAY,CAACC,GAAG,CAAC,iBAAiB;YAC7CJ,WAAWG,YAAY,CAACC,GAAG,CAAC,UAAU;YACtC,OAAO;gBAACI,aAAaR,WAAWS,QAAQ;YAAE;QAC5C;IACF;IACA,MAAMC,mBAAmBrC,YAAY;QACnCe,QAAQ;QACRC,MAAM;QACNC,MAAM1B;QACN2B,aAAa;QACbC,QAAQ;YAACmB,aAAazC;YAAyBwB,UAAU;gBAAC,KAAKvB;YAA0B;QAAC;QAC1FyC,cAAc/B;QACdc,SAAS,OAAOC;YACd,MAAMG,QAAQlC,mBAAmB+B;YACjC,MAAMiB,QAAQjB,QAAQiB,KAAK;YAC3B,IAAIC,yBAAyBD,QAC3B,OAAO,MAAMrC,6BAA6B;gBACxCuC,OAAOF,MAAME,KAAK;gBAClBC,OAAOH,MAAMG,KAAK;gBAClBC,kBAAkBJ,MAAMK,iBAAiB;gBACzCC,eAAepB,MAAMQ,MAAM;gBAC3Ba,oBAAoBrB,MAAMsB,WAAW;gBACrCC,4BAA4BtC;YAC9B;YACF,MAAMuC,SAAS,MAAMhD,mBAAmB;gBACtC,GAAGQ,OAAO;gBACVyC,MAAMX,MAAMW,IAAI;gBAChBT,OAAOF,MAAME,KAAK;gBAClBI,eAAepB,MAAMQ,MAAM;gBAC3Ba,oBAAoBrB,MAAMsB,WAAW;gBACrCC,4BAA4BtC;YAC9B;YACA,OAAO,WAAWuC,SACd;gBACEE,OAAOF,OAAOE,KAAK,CAACC,GAAG,CAAC,CAACC,OAAU,CAAA;wBACjCC,UAAUD,KAAKE,OAAO;wBACtBC,MAAMH,KAAKG,IAAI;wBACfC,KAAKJ,KAAKI,GAAG;wBACbC,QAAQL,KAAKK,MAAM;oBACrB,CAAA;YACF,IACApD,2BAA2B2C,QAAQ;gBAACU,cAAclD,QAAQmD,sBAAsB;YAAA;QACtF;IACF;IACA,MAAMC,qBAAqB9D,YAAY;QACrCe,QAAQ;QACRC,MAAM;QACNC,MAAM1B;QACN2B,aAAa;QACbC,QAAQ;YACNC,MAAM1B;YACN2B,UAAU;gBAAC,KAAKtB;YAA8B;QAChD;QACAwC,cAAc/B;QACdc,SAAS,OAAOC;YACd,MAAMG,QAAQlC,mBAAmB+B;YACjC,MAAMwC,aAAa,MAAM3D,wBAAwB;gBAC/C,GAAGM,OAAO;gBACV8C,SAASjC,QAAQH,IAAI,CAACmC,QAAQ;gBAC9Bb,OAAOnB,QAAQH,IAAI,CAACsB,KAAK;gBACzBI,eAAepB,MAAMQ,MAAM;gBAC3Ba,oBAAoBrB,MAAMsB,WAAW;gBACrCC,4BAA4BtC;YAC9B;YACA,OAAOJ,2BAA2BwD,YAAY;gBAACH,cAAclD,QAAQmD,sBAAsB;YAAA;QAC7F;IACF;IACA,OAAO;QACLG,QAAQ;QACRC,QAAQ;YAACnD;YAAcuB;YAAkByB;SAAmB;IAC9D;AACF;AAEA,SAASjD,oCAAoCqD,MAI5C;IACC,OAAOC,QAAQC,MAAM,CAAC,IAAIC,MAAM;AAClC;AAEA,SAAS5B,yBAAyBD,KAA2B;IAK3D,OAAO,WAAWA,SAAS,OAAOA,MAAMG,KAAK,KAAK;AACpD"}

package/dist/presentation/routes/webhooks.d.ts

@@ -0,0 +1,8 @@
+import { type RouteGroup } from '@shipfox/node-fastify';
+import { type CreateJiraWebhookProcessorOptions, type JiraWebhookProcessor } from '#core/webhook-processor.js';
+export declare const JIRA_WEBHOOK_ROUTE_PREFIX = "/webhooks/integrations/jira";
+export interface CreateJiraWebhookRoutesOptions extends Omit<CreateJiraWebhookProcessorOptions, 'getJiraInstallationByConnectionId'> {
+    processor?: JiraWebhookProcessor | undefined;
+}
+export declare function createJiraWebhookRoutes(options: CreateJiraWebhookRoutesOptions): RouteGroup;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/presentation/routes/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/webhooks.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,UAAU,EAGhB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,KAAK,iCAAiC,EAEtC,KAAK,oBAAoB,EAC1B,MAAM,4BAA4B,CAAC;AAGpC,eAAO,MAAM,yBAAyB,gCAAgC,CAAC;AAEvE,MAAM,WAAW,8BACf,SAAQ,IAAI,CAAC,iCAAiC,EAAE,mCAAmC,CAAC;IACpF,SAAS,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;CAC9C;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,8BAA8B,GAAG,UAAU,CAgC3F"}

package/dist/presentation/routes/webhooks.js

@@ -0,0 +1,108 @@
+import { randomUUID } from 'node:crypto';
+import { createStoredWebhookRequest, WEBHOOK_MAX_RAW_BODY_BYTES } from '@shipfox/api-integration-spi';
+import { ClientError, defineRoute, rawBodyPlugin, WEBHOOK_BODY_LIMIT } from '@shipfox/node-fastify';
+import { z } from 'zod';
+import { createJiraWebhookProcessor } from '#core/webhook-processor.js';
+const jiraWebhookParamsSchema = z.object({
+    connectionId: z.string().uuid()
+});
+export const JIRA_WEBHOOK_ROUTE_PREFIX = '/webhooks/integrations/jira';
+export function createJiraWebhookRoutes(options) {
+    const processor = options.processor ?? createJiraWebhookProcessor(options);
+    const route = defineRoute({
+        method: 'POST',
+        path: '/:connectionId',
+        auth: [],
+        description: 'Jira dynamic webhook receiver.',
+        options: {
+            bodyLimit: WEBHOOK_BODY_LIMIT
+        },
+        schema: {
+            params: jiraWebhookParamsSchema
+        },
+        handler: async (request, reply)=>{
+            const body = request.body;
+            if (!(body instanceof Uint8Array)) {
+                throw new ClientError('Expected raw JSON body', 'invalid-webhook-request', {
+                    status: 400
+                });
+            }
+            const result = await processor.process(createJiraStoredWebhookRequest({
+                body,
+                connectionId: request.params.connectionId,
+                headers: request.headers,
+                rawQueryString: request.raw.url?.split('?')[1] ?? ''
+            }));
+            return sendJiraWebhookResponse(reply, result);
+        }
+    });
+    return {
+        prefix: JIRA_WEBHOOK_ROUTE_PREFIX,
+        auth: [],
+        plugins: [
+            rawBodyPlugin
+        ],
+        routes: [
+            route
+        ]
+    };
+}
+function createJiraStoredWebhookRequest(input) {
+    if (input.body.byteLength > WEBHOOK_MAX_RAW_BODY_BYTES) {
+        throw new ClientError('Webhook request body is too large', 'body-too-large', {
+            status: 413
+        });
+    }
+    try {
+        return createStoredWebhookRequest({
+            requestId: randomUUID(),
+            routeId: 'jira',
+            receivedAt: new Date().toISOString(),
+            rawQueryString: input.rawQueryString,
+            headers: jiraWebhookHeaders(input.headers),
+            body: input.body,
+            connectionId: input.connectionId
+        });
+    } catch (error) {
+        throw new ClientError('Webhook request metadata is invalid', 'invalid-webhook-request', {
+            cause: error
+        });
+    }
+}
+function jiraWebhookHeaders(headers) {
+    return Object.fromEntries([
+        'authorization',
+        'content-type',
+        'x-atlassian-webhook-identifier'
+    ].flatMap((name)=>{
+        const value = headers[name];
+        return typeof value === 'string' ? [
+            [
+                name,
+                value
+            ]
+        ] : [];
+    }));
+}
+function sendJiraWebhookResponse(reply, result) {
+    if (result.outcome !== 'discarded') {
+        reply.code(200);
+        return null;
+    }
+    if (result.reason === 'invalid_signature' || result.reason === 'missing_required_input') {
+        reply.code(401);
+        return {
+            error: 'invalid authorization'
+        };
+    }
+    if (result.reason === 'malformed_payload') {
+        reply.code(400);
+        return {
+            error: 'malformed JSON'
+        };
+    }
+    reply.code(200);
+    return null;
+}
+
+//# sourceMappingURL=webhooks.js.map

package/dist/presentation/routes/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/routes/webhooks.ts"],"sourcesContent":["import {randomUUID} from 'node:crypto';\nimport type {StoredWebhookRequest, WebhookProcessingResult} from '@shipfox/api-integration-spi';\nimport {createStoredWebhookRequest, WEBHOOK_MAX_RAW_BODY_BYTES} from '@shipfox/api-integration-spi';\nimport {\n  ClientError,\n  defineRoute,\n  type RouteGroup,\n  rawBodyPlugin,\n  WEBHOOK_BODY_LIMIT,\n} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {\n  type CreateJiraWebhookProcessorOptions,\n  createJiraWebhookProcessor,\n  type JiraWebhookProcessor,\n} from '#core/webhook-processor.js';\n\nconst jiraWebhookParamsSchema = z.object({connectionId: z.string().uuid()});\nexport const JIRA_WEBHOOK_ROUTE_PREFIX = '/webhooks/integrations/jira';\n\nexport interface CreateJiraWebhookRoutesOptions\n  extends Omit<CreateJiraWebhookProcessorOptions, 'getJiraInstallationByConnectionId'> {\n  processor?: JiraWebhookProcessor | undefined;\n}\n\nexport function createJiraWebhookRoutes(options: CreateJiraWebhookRoutesOptions): RouteGroup {\n  const processor = options.processor ?? createJiraWebhookProcessor(options);\n  const route = defineRoute({\n    method: 'POST',\n    path: '/:connectionId',\n    auth: [],\n    description: 'Jira dynamic webhook receiver.',\n    options: {bodyLimit: WEBHOOK_BODY_LIMIT},\n    schema: {params: jiraWebhookParamsSchema},\n    handler: async (request, reply) => {\n      const body = request.body;\n      if (!(body instanceof Uint8Array)) {\n        throw new ClientError('Expected raw JSON body', 'invalid-webhook-request', {status: 400});\n      }\n      const result = await processor.process(\n        createJiraStoredWebhookRequest({\n          body,\n          connectionId: request.params.connectionId,\n          headers: request.headers,\n          rawQueryString: request.raw.url?.split('?')[1] ?? '',\n        }),\n      );\n      return sendJiraWebhookResponse(reply, result);\n    },\n  });\n\n  return {\n    prefix: JIRA_WEBHOOK_ROUTE_PREFIX,\n    auth: [],\n    plugins: [rawBodyPlugin],\n    routes: [route],\n  };\n}\n\nfunction createJiraStoredWebhookRequest(input: {\n  body: Uint8Array;\n  connectionId: string;\n  headers: Record<string, string | string[] | undefined>;\n  rawQueryString: string;\n}): StoredWebhookRequest {\n  if (input.body.byteLength > WEBHOOK_MAX_RAW_BODY_BYTES) {\n    throw new ClientError('Webhook request body is too large', 'body-too-large', {status: 413});\n  }\n  try {\n    return createStoredWebhookRequest({\n      requestId: randomUUID(),\n      routeId: 'jira',\n      receivedAt: new Date().toISOString(),\n      rawQueryString: input.rawQueryString,\n      headers: jiraWebhookHeaders(input.headers),\n      body: input.body,\n      connectionId: input.connectionId,\n    });\n  } catch (error) {\n    throw new ClientError('Webhook request metadata is invalid', 'invalid-webhook-request', {\n      cause: error,\n    });\n  }\n}\n\nfunction jiraWebhookHeaders(\n  headers: Record<string, string | string[] | undefined>,\n): Record<string, string> {\n  return Object.fromEntries(\n    ['authorization', 'content-type', 'x-atlassian-webhook-identifier'].flatMap((name) => {\n      const value = headers[name];\n      return typeof value === 'string' ? [[name, value]] : [];\n    }),\n  );\n}\n\nfunction sendJiraWebhookResponse(\n  reply: {code(statusCode: number): void},\n  result: WebhookProcessingResult,\n) {\n  if (result.outcome !== 'discarded') {\n    reply.code(200);\n    return null;\n  }\n  if (result.reason === 'invalid_signature' || result.reason === 'missing_required_input') {\n    reply.code(401);\n    return {error: 'invalid authorization'};\n  }\n  if (result.reason === 'malformed_payload') {\n    reply.code(400);\n    return {error: 'malformed JSON'};\n  }\n  reply.code(200);\n  return null;\n}\n"],"names":["randomUUID","createStoredWebhookRequest","WEBHOOK_MAX_RAW_BODY_BYTES","ClientError","defineRoute","rawBodyPlugin","WEBHOOK_BODY_LIMIT","z","createJiraWebhookProcessor","jiraWebhookParamsSchema","object","connectionId","string","uuid","JIRA_WEBHOOK_ROUTE_PREFIX","createJiraWebhookRoutes","options","processor","route","method","path","auth","description","bodyLimit","schema","params","handler","request","reply","body","Uint8Array","status","result","process","createJiraStoredWebhookRequest","headers","rawQueryString","raw","url","split","sendJiraWebhookResponse","prefix","plugins","routes","input","byteLength","requestId","routeId","receivedAt","Date","toISOString","jiraWebhookHeaders","error","cause","Object","fromEntries","flatMap","name","value","outcome","code","reason"],"mappings":"AAAA,SAAQA,UAAU,QAAO,cAAc;AAEvC,SAAQC,0BAA0B,EAAEC,0BAA0B,QAAO,+BAA+B;AACpG,SACEC,WAAW,EACXC,WAAW,EAEXC,aAAa,EACbC,kBAAkB,QACb,wBAAwB;AAC/B,SAAQC,CAAC,QAAO,MAAM;AACtB,SAEEC,0BAA0B,QAErB,6BAA6B;AAEpC,MAAMC,0BAA0BF,EAAEG,MAAM,CAAC;IAACC,cAAcJ,EAAEK,MAAM,GAAGC,IAAI;AAAE;AACzE,OAAO,MAAMC,4BAA4B,8BAA8B;AAOvE,OAAO,SAASC,wBAAwBC,OAAuC;IAC7E,MAAMC,YAAYD,QAAQC,SAAS,IAAIT,2BAA2BQ;IAClE,MAAME,QAAQd,YAAY;QACxBe,QAAQ;QACRC,MAAM;QACNC,MAAM,EAAE;QACRC,aAAa;QACbN,SAAS;YAACO,WAAWjB;QAAkB;QACvCkB,QAAQ;YAACC,QAAQhB;QAAuB;QACxCiB,SAAS,OAAOC,SAASC;YACvB,MAAMC,OAAOF,QAAQE,IAAI;YACzB,IAAI,CAAEA,CAAAA,gBAAgBC,UAAS,GAAI;gBACjC,MAAM,IAAI3B,YAAY,0BAA0B,2BAA2B;oBAAC4B,QAAQ;gBAAG;YACzF;YACA,MAAMC,SAAS,MAAMf,UAAUgB,OAAO,CACpCC,+BAA+B;gBAC7BL;gBACAlB,cAAcgB,QAAQF,MAAM,CAACd,YAAY;gBACzCwB,SAASR,QAAQQ,OAAO;gBACxBC,gBAAgBT,QAAQU,GAAG,CAACC,GAAG,EAAEC,MAAM,IAAI,CAAC,EAAE,IAAI;YACpD;YAEF,OAAOC,wBAAwBZ,OAAOI;QACxC;IACF;IAEA,OAAO;QACLS,QAAQ3B;QACRO,MAAM,EAAE;QACRqB,SAAS;YAACrC;SAAc;QACxBsC,QAAQ;YAACzB;SAAM;IACjB;AACF;AAEA,SAASgB,+BAA+BU,KAKvC;IACC,IAAIA,MAAMf,IAAI,CAACgB,UAAU,GAAG3C,4BAA4B;QACtD,MAAM,IAAIC,YAAY,qCAAqC,kBAAkB;YAAC4B,QAAQ;QAAG;IAC3F;IACA,IAAI;QACF,OAAO9B,2BAA2B;YAChC6C,WAAW9C;YACX+C,SAAS;YACTC,YAAY,IAAIC,OAAOC,WAAW;YAClCd,gBAAgBQ,MAAMR,cAAc;YACpCD,SAASgB,mBAAmBP,MAAMT,OAAO;YACzCN,MAAMe,MAAMf,IAAI;YAChBlB,cAAciC,MAAMjC,YAAY;QAClC;IACF,EAAE,OAAOyC,OAAO;QACd,MAAM,IAAIjD,YAAY,uCAAuC,2BAA2B;YACtFkD,OAAOD;QACT;IACF;AACF;AAEA,SAASD,mBACPhB,OAAsD;IAEtD,OAAOmB,OAAOC,WAAW,CACvB;QAAC;QAAiB;QAAgB;KAAiC,CAACC,OAAO,CAAC,CAACC;QAC3E,MAAMC,QAAQvB,OAAO,CAACsB,KAAK;QAC3B,OAAO,OAAOC,UAAU,WAAW;YAAC;gBAACD;gBAAMC;aAAM;SAAC,GAAG,EAAE;IACzD;AAEJ;AAEA,SAASlB,wBACPZ,KAAuC,EACvCI,MAA+B;IAE/B,IAAIA,OAAO2B,OAAO,KAAK,aAAa;QAClC/B,MAAMgC,IAAI,CAAC;QACX,OAAO;IACT;IACA,IAAI5B,OAAO6B,MAAM,KAAK,uBAAuB7B,OAAO6B,MAAM,KAAK,0BAA0B;QACvFjC,MAAMgC,IAAI,CAAC;QACX,OAAO;YAACR,OAAO;QAAuB;IACxC;IACA,IAAIpB,OAAO6B,MAAM,KAAK,qBAAqB;QACzCjC,MAAMgC,IAAI,CAAC;QACX,OAAO;YAACR,OAAO;QAAgB;IACjC;IACAxB,MAAMgC,IAAI,CAAC;IACX,OAAO;AACT"}

package/dist/temporal/activities/index.d.ts

@@ -0,0 +1,2 @@
+export { type CreateJiraMaintenanceActivitiesOptions, createJiraMaintenanceActivities, type JiraTokenRefreshActivityResult, } from './refresh-jira-tokens.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/temporal/activities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/temporal/activities/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,sCAAsC,EAC3C,+BAA+B,EAC/B,KAAK,8BAA8B,GACpC,MAAM,0BAA0B,CAAC"}

package/dist/temporal/activities/index.js

@@ -0,0 +1,3 @@
+export { createJiraMaintenanceActivities } from './refresh-jira-tokens.js';
+
+//# sourceMappingURL=index.js.map

package/dist/temporal/activities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/temporal/activities/index.ts"],"sourcesContent":["export {\n  type CreateJiraMaintenanceActivitiesOptions,\n  createJiraMaintenanceActivities,\n  type JiraTokenRefreshActivityResult,\n} from './refresh-jira-tokens.js';\n"],"names":["createJiraMaintenanceActivities"],"mappings":"AAAA,SAEEA,+BAA+B,QAE1B,2BAA2B"}

package/dist/temporal/activities/refresh-jira-tokens.d.ts

@@ -0,0 +1,20 @@
+import type { IntegrationConnection } from '@shipfox/api-integration-spi';
+import type { JiraTokenStore } from '#core/tokens.js';
+import { listJiraInstallationsDueForTokenRefresh, markJiraInstallationTokenRefreshAttempt } from '#db/installations.js';
+export interface JiraTokenRefreshActivityResult {
+    refreshed: number;
+    skipped: number;
+    failed: number;
+}
+export interface CreateJiraMaintenanceActivitiesOptions {
+    tokenStore: Pick<JiraTokenStore, 'getAccessToken'>;
+    resolveConnection(connectionId: string): Promise<Pick<IntegrationConnection, 'lifecycleStatus'> | undefined>;
+    listInstallations?: typeof listJiraInstallationsDueForTokenRefresh | undefined;
+    markAttempted?: typeof markJiraInstallationTokenRefreshAttempt | undefined;
+    now?: (() => Date) | undefined;
+    heartbeat?: (() => void) | undefined;
+}
+export declare function createJiraMaintenanceActivities(options: CreateJiraMaintenanceActivitiesOptions): {
+    refreshJiraTokensActivity(): Promise<JiraTokenRefreshActivityResult>;
+};
+//# sourceMappingURL=refresh-jira-tokens.d.ts.map

package/dist/temporal/activities/refresh-jira-tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-jira-tokens.d.ts","sourceRoot":"","sources":["../../../src/temporal/activities/refresh-jira-tokens.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,8BAA8B,CAAC;AAExE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAEL,uCAAuC,EACvC,uCAAuC,EACxC,MAAM,sBAAsB,CAAC;AAQ9B,MAAM,WAAW,8BAA8B;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sCAAsC;IACrD,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IACnD,iBAAiB,CACf,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,GAAG,SAAS,CAAC,CAAC;IACvE,iBAAiB,CAAC,EAAE,OAAO,uCAAuC,GAAG,SAAS,CAAC;IAC/E,aAAa,CAAC,EAAE,OAAO,uCAAuC,GAAG,SAAS,CAAC;IAC3E,GAAG,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;IAC/B,SAAS,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;CACtC;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,sCAAsC;iCAOxD,OAAO,CAAC,8BAA8B,CAAC;EAsC7E"}

package/dist/temporal/activities/refresh-jira-tokens.js

@@ -0,0 +1,58 @@
+import { logger } from '@shipfox/node-opentelemetry';
+import { listJiraInstallationsDueForTokenRefresh, markJiraInstallationTokenRefreshAttempt } from '#db/installations.js';
+import { JIRA_REFRESH_TOKEN_PROACTIVE_REFRESH_AFTER_MS, JIRA_REFRESH_TOKEN_SWEEP_BATCH_SIZE } from '#temporal/constants.js';
+const JIRA_REFRESH_TOKEN_HEARTBEAT_INTERVAL_MS = 15_000;
+export function createJiraMaintenanceActivities(options) {
+    const listInstallations = options.listInstallations ?? listJiraInstallationsDueForTokenRefresh;
+    const markAttempted = options.markAttempted ?? markJiraInstallationTokenRefreshAttempt;
+    const now = options.now ?? (()=>new Date());
+    const heartbeat = options.heartbeat ?? (()=>undefined);
+    return {
+        async refreshJiraTokensActivity () {
+            const before = new Date(now().getTime() - JIRA_REFRESH_TOKEN_PROACTIVE_REFRESH_AFTER_MS);
+            const installations = await listInstallations({
+                before,
+                limit: JIRA_REFRESH_TOKEN_SWEEP_BATCH_SIZE
+            });
+            let refreshed = 0;
+            let skipped = 0;
+            let failed = 0;
+            for (const installation of installations){
+                const heartbeatInterval = setInterval(heartbeat, JIRA_REFRESH_TOKEN_HEARTBEAT_INTERVAL_MS);
+                try {
+                    heartbeat();
+                    await markAttempted(installation.connectionId);
+                    const connection = await options.resolveConnection(installation.connectionId);
+                    if (connection?.lifecycleStatus !== 'active') {
+                        skipped += 1;
+                        continue;
+                    }
+                    await options.tokenStore.getAccessToken({
+                        connectionId: installation.connectionId,
+                        forceRefresh: true
+                    });
+                    refreshed += 1;
+                } catch (error) {
+                    failed += 1;
+                    logRefreshFailure(installation, error);
+                } finally{
+                    clearInterval(heartbeatInterval);
+                    heartbeat();
+                }
+            }
+            return {
+                refreshed,
+                skipped,
+                failed
+            };
+        }
+    };
+}
+function logRefreshFailure(installation, error) {
+    logger().warn({
+        connectionId: installation.connectionId,
+        err: error
+    }, 'Jira proactive token refresh failed');
+}
+
+//# sourceMappingURL=refresh-jira-tokens.js.map

package/dist/temporal/activities/refresh-jira-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/temporal/activities/refresh-jira-tokens.ts"],"sourcesContent":["import type {IntegrationConnection} from '@shipfox/api-integration-spi';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport type {JiraTokenStore} from '#core/tokens.js';\nimport {\n  type JiraInstallation,\n  listJiraInstallationsDueForTokenRefresh,\n  markJiraInstallationTokenRefreshAttempt,\n} from '#db/installations.js';\nimport {\n  JIRA_REFRESH_TOKEN_PROACTIVE_REFRESH_AFTER_MS,\n  JIRA_REFRESH_TOKEN_SWEEP_BATCH_SIZE,\n} from '#temporal/constants.js';\n\nconst JIRA_REFRESH_TOKEN_HEARTBEAT_INTERVAL_MS = 15_000;\n\nexport interface JiraTokenRefreshActivityResult {\n  refreshed: number;\n  skipped: number;\n  failed: number;\n}\n\nexport interface CreateJiraMaintenanceActivitiesOptions {\n  tokenStore: Pick<JiraTokenStore, 'getAccessToken'>;\n  resolveConnection(\n    connectionId: string,\n  ): Promise<Pick<IntegrationConnection, 'lifecycleStatus'> | undefined>;\n  listInstallations?: typeof listJiraInstallationsDueForTokenRefresh | undefined;\n  markAttempted?: typeof markJiraInstallationTokenRefreshAttempt | undefined;\n  now?: (() => Date) | undefined;\n  heartbeat?: (() => void) | undefined;\n}\n\nexport function createJiraMaintenanceActivities(options: CreateJiraMaintenanceActivitiesOptions) {\n  const listInstallations = options.listInstallations ?? listJiraInstallationsDueForTokenRefresh;\n  const markAttempted = options.markAttempted ?? markJiraInstallationTokenRefreshAttempt;\n  const now = options.now ?? (() => new Date());\n  const heartbeat = options.heartbeat ?? (() => undefined);\n\n  return {\n    async refreshJiraTokensActivity(): Promise<JiraTokenRefreshActivityResult> {\n      const before = new Date(now().getTime() - JIRA_REFRESH_TOKEN_PROACTIVE_REFRESH_AFTER_MS);\n      const installations = await listInstallations({\n        before,\n        limit: JIRA_REFRESH_TOKEN_SWEEP_BATCH_SIZE,\n      });\n      let refreshed = 0;\n      let skipped = 0;\n      let failed = 0;\n\n      for (const installation of installations) {\n        const heartbeatInterval = setInterval(heartbeat, JIRA_REFRESH_TOKEN_HEARTBEAT_INTERVAL_MS);\n        try {\n          heartbeat();\n          await markAttempted(installation.connectionId);\n          const connection = await options.resolveConnection(installation.connectionId);\n          if (connection?.lifecycleStatus !== 'active') {\n            skipped += 1;\n            continue;\n          }\n\n          await options.tokenStore.getAccessToken({\n            connectionId: installation.connectionId,\n            forceRefresh: true,\n          });\n          refreshed += 1;\n        } catch (error) {\n          failed += 1;\n          logRefreshFailure(installation, error);\n        } finally {\n          clearInterval(heartbeatInterval);\n          heartbeat();\n        }\n      }\n\n      return {refreshed, skipped, failed};\n    },\n  };\n}\n\nfunction logRefreshFailure(installation: JiraInstallation, error: unknown): void {\n  logger().warn(\n    {\n      connectionId: installation.connectionId,\n      err: error,\n    },\n    'Jira proactive token refresh failed',\n  );\n}\n"],"names":["logger","listJiraInstallationsDueForTokenRefresh","markJiraInstallationTokenRefreshAttempt","JIRA_REFRESH_TOKEN_PROACTIVE_REFRESH_AFTER_MS","JIRA_REFRESH_TOKEN_SWEEP_BATCH_SIZE","JIRA_REFRESH_TOKEN_HEARTBEAT_INTERVAL_MS","createJiraMaintenanceActivities","options","listInstallations","markAttempted","now","Date","heartbeat","undefined","refreshJiraTokensActivity","before","getTime","installations","limit","refreshed","skipped","failed","installation","heartbeatInterval","setInterval","connectionId","connection","resolveConnection","lifecycleStatus","tokenStore","getAccessToken","forceRefresh","error","logRefreshFailure","clearInterval","warn","err"],"mappings":"AACA,SAAQA,MAAM,QAAO,8BAA8B;AAEnD,SAEEC,uCAAuC,EACvCC,uCAAuC,QAClC,uBAAuB;AAC9B,SACEC,6CAA6C,EAC7CC,mCAAmC,QAC9B,yBAAyB;AAEhC,MAAMC,2CAA2C;AAmBjD,OAAO,SAASC,gCAAgCC,OAA+C;IAC7F,MAAMC,oBAAoBD,QAAQC,iBAAiB,IAAIP;IACvD,MAAMQ,gBAAgBF,QAAQE,aAAa,IAAIP;IAC/C,MAAMQ,MAAMH,QAAQG,GAAG,IAAK,CAAA,IAAM,IAAIC,MAAK;IAC3C,MAAMC,YAAYL,QAAQK,SAAS,IAAK,CAAA,IAAMC,SAAQ;IAEtD,OAAO;QACL,MAAMC;YACJ,MAAMC,SAAS,IAAIJ,KAAKD,MAAMM,OAAO,KAAKb;YAC1C,MAAMc,gBAAgB,MAAMT,kBAAkB;gBAC5CO;gBACAG,OAAOd;YACT;YACA,IAAIe,YAAY;YAChB,IAAIC,UAAU;YACd,IAAIC,SAAS;YAEb,KAAK,MAAMC,gBAAgBL,cAAe;gBACxC,MAAMM,oBAAoBC,YAAYZ,WAAWP;gBACjD,IAAI;oBACFO;oBACA,MAAMH,cAAca,aAAaG,YAAY;oBAC7C,MAAMC,aAAa,MAAMnB,QAAQoB,iBAAiB,CAACL,aAAaG,YAAY;oBAC5E,IAAIC,YAAYE,oBAAoB,UAAU;wBAC5CR,WAAW;wBACX;oBACF;oBAEA,MAAMb,QAAQsB,UAAU,CAACC,cAAc,CAAC;wBACtCL,cAAcH,aAAaG,YAAY;wBACvCM,cAAc;oBAChB;oBACAZ,aAAa;gBACf,EAAE,OAAOa,OAAO;oBACdX,UAAU;oBACVY,kBAAkBX,cAAcU;gBAClC,SAAU;oBACRE,cAAcX;oBACdX;gBACF;YACF;YAEA,OAAO;gBAACO;gBAAWC;gBAASC;YAAM;QACpC;IACF;AACF;AAEA,SAASY,kBAAkBX,YAA8B,EAAEU,KAAc;IACvEhC,SAASmC,IAAI,CACX;QACEV,cAAcH,aAAaG,YAAY;QACvCW,KAAKJ;IACP,GACA;AAEJ"}

package/dist/temporal/constants.d.ts

@@ -0,0 +1,6 @@
+export declare const JIRA_REFRESH_TOKEN_IDLE_WINDOW_MS: number;
+export declare const JIRA_REFRESH_TOKEN_REFRESH_LEAD_TIME_MS: number;
+export declare const JIRA_REFRESH_TOKEN_PROACTIVE_REFRESH_AFTER_MS: number;
+export declare const JIRA_REFRESH_TOKEN_SWEEP_BATCH_SIZE = 20;
+export declare const JIRA_MAINTENANCE_TASK_QUEUE = "integrations-jira-maintenance";
+//# sourceMappingURL=constants.d.ts.map

package/dist/temporal/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/temporal/constants.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,iCAAiC,QAAkB,CAAC;AACjE,eAAO,MAAM,uCAAuC,QAAkB,CAAC;AACvE,eAAO,MAAM,6CAA6C,QACmB,CAAC;AAC9E,eAAO,MAAM,mCAAmC,KAAK,CAAC;AACtD,eAAO,MAAM,2BAA2B,kCAAkC,CAAC"}

package/dist/temporal/constants.js

@@ -0,0 +1,8 @@
+const MS_PER_DAY = 24 * 60 * 60 * 1000;
+export const JIRA_REFRESH_TOKEN_IDLE_WINDOW_MS = 90 * MS_PER_DAY;
+export const JIRA_REFRESH_TOKEN_REFRESH_LEAD_TIME_MS = 14 * MS_PER_DAY;
+export const JIRA_REFRESH_TOKEN_PROACTIVE_REFRESH_AFTER_MS = JIRA_REFRESH_TOKEN_IDLE_WINDOW_MS - JIRA_REFRESH_TOKEN_REFRESH_LEAD_TIME_MS;
+export const JIRA_REFRESH_TOKEN_SWEEP_BATCH_SIZE = 20;
+export const JIRA_MAINTENANCE_TASK_QUEUE = 'integrations-jira-maintenance';
+
+//# sourceMappingURL=constants.js.map

package/dist/temporal/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/temporal/constants.ts"],"sourcesContent":["const MS_PER_DAY = 24 * 60 * 60 * 1000;\n\nexport const JIRA_REFRESH_TOKEN_IDLE_WINDOW_MS = 90 * MS_PER_DAY;\nexport const JIRA_REFRESH_TOKEN_REFRESH_LEAD_TIME_MS = 14 * MS_PER_DAY;\nexport const JIRA_REFRESH_TOKEN_PROACTIVE_REFRESH_AFTER_MS =\n  JIRA_REFRESH_TOKEN_IDLE_WINDOW_MS - JIRA_REFRESH_TOKEN_REFRESH_LEAD_TIME_MS;\nexport const JIRA_REFRESH_TOKEN_SWEEP_BATCH_SIZE = 20;\nexport const JIRA_MAINTENANCE_TASK_QUEUE = 'integrations-jira-maintenance';\n"],"names":["MS_PER_DAY","JIRA_REFRESH_TOKEN_IDLE_WINDOW_MS","JIRA_REFRESH_TOKEN_REFRESH_LEAD_TIME_MS","JIRA_REFRESH_TOKEN_PROACTIVE_REFRESH_AFTER_MS","JIRA_REFRESH_TOKEN_SWEEP_BATCH_SIZE","JIRA_MAINTENANCE_TASK_QUEUE"],"mappings":"AAAA,MAAMA,aAAa,KAAK,KAAK,KAAK;AAElC,OAAO,MAAMC,oCAAoC,KAAKD,WAAW;AACjE,OAAO,MAAME,0CAA0C,KAAKF,WAAW;AACvE,OAAO,MAAMG,gDACXF,oCAAoCC,wCAAwC;AAC9E,OAAO,MAAME,sCAAsC,GAAG;AACtD,OAAO,MAAMC,8BAA8B,gCAAgC"}

package/dist/temporal/worker.d.ts

@@ -0,0 +1,9 @@
+import type { IntegrationConnection } from '@shipfox/api-integration-spi';
+import type { ModuleWorker } from '@shipfox/node-module';
+import type { JiraTokenStore } from '#core/tokens.js';
+export interface CreateJiraMaintenanceWorkerOptions {
+    tokenStore: Pick<JiraTokenStore, 'getAccessToken'>;
+    resolveConnection(connectionId: string): Promise<Pick<IntegrationConnection, 'lifecycleStatus'> | undefined>;
+}
+export declare function createJiraMaintenanceWorker(options: CreateJiraMaintenanceWorkerOptions): ModuleWorker;
+//# sourceMappingURL=worker.d.ts.map

package/dist/temporal/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/temporal/worker.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,8BAA8B,CAAC;AACxE,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,sBAAsB,CAAC;AAEvD,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,iBAAiB,CAAC;AAOpD,MAAM,WAAW,kCAAkC;IACjD,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IACnD,iBAAiB,CACf,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,iBAAiB,CAAC,GAAG,SAAS,CAAC,CAAC;CACxE;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,kCAAkC,GAC1C,YAAY,CAiBd"}

package/dist/temporal/worker.js

@@ -0,0 +1,26 @@
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { Context } from '@temporalio/activity';
+import { createJiraMaintenanceActivities } from '#temporal/activities/index.js';
+import { JIRA_MAINTENANCE_TASK_QUEUE } from '#temporal/constants.js';
+const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '../..');
+const workflowsPath = resolve(packageRoot, 'dist/temporal/workflows/index.js');
+export function createJiraMaintenanceWorker(options) {
+    return {
+        taskQueue: JIRA_MAINTENANCE_TASK_QUEUE,
+        workflowsPath,
+        activities: ()=>createJiraMaintenanceActivities({
+                ...options,
+                heartbeat: ()=>Context.current().heartbeat()
+            }),
+        workflows: [
+            {
+                name: 'refreshJiraTokensCron',
+                id: 'jira-refresh-tokens',
+                cronSchedule: '0 */6 * * *'
+            }
+        ]
+    };
+}
+
+//# sourceMappingURL=worker.js.map

package/dist/temporal/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/temporal/worker.ts"],"sourcesContent":["import {dirname, resolve} from 'node:path';\nimport {fileURLToPath} from 'node:url';\nimport type {IntegrationConnection} from '@shipfox/api-integration-spi';\nimport type {ModuleWorker} from '@shipfox/node-module';\nimport {Context} from '@temporalio/activity';\nimport type {JiraTokenStore} from '#core/tokens.js';\nimport {createJiraMaintenanceActivities} from '#temporal/activities/index.js';\nimport {JIRA_MAINTENANCE_TASK_QUEUE} from '#temporal/constants.js';\n\nconst packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '../..');\nconst workflowsPath = resolve(packageRoot, 'dist/temporal/workflows/index.js');\n\nexport interface CreateJiraMaintenanceWorkerOptions {\n  tokenStore: Pick<JiraTokenStore, 'getAccessToken'>;\n  resolveConnection(\n    connectionId: string,\n  ): Promise<Pick<IntegrationConnection, 'lifecycleStatus'> | undefined>;\n}\n\nexport function createJiraMaintenanceWorker(\n  options: CreateJiraMaintenanceWorkerOptions,\n): ModuleWorker {\n  return {\n    taskQueue: JIRA_MAINTENANCE_TASK_QUEUE,\n    workflowsPath,\n    activities: () =>\n      createJiraMaintenanceActivities({\n        ...options,\n        heartbeat: () => Context.current().heartbeat(),\n      }),\n    workflows: [\n      {\n        name: 'refreshJiraTokensCron',\n        id: 'jira-refresh-tokens',\n        cronSchedule: '0 */6 * * *',\n      },\n    ],\n  };\n}\n"],"names":["dirname","resolve","fileURLToPath","Context","createJiraMaintenanceActivities","JIRA_MAINTENANCE_TASK_QUEUE","packageRoot","url","workflowsPath","createJiraMaintenanceWorker","options","taskQueue","activities","heartbeat","current","workflows","name","id","cronSchedule"],"mappings":"AAAA,SAAQA,OAAO,EAAEC,OAAO,QAAO,YAAY;AAC3C,SAAQC,aAAa,QAAO,WAAW;AAGvC,SAAQC,OAAO,QAAO,uBAAuB;AAE7C,SAAQC,+BAA+B,QAAO,gCAAgC;AAC9E,SAAQC,2BAA2B,QAAO,yBAAyB;AAEnE,MAAMC,cAAcL,QAAQD,QAAQE,cAAc,YAAYK,GAAG,IAAI;AACrE,MAAMC,gBAAgBP,QAAQK,aAAa;AAS3C,OAAO,SAASG,4BACdC,OAA2C;IAE3C,OAAO;QACLC,WAAWN;QACXG;QACAI,YAAY,IACVR,gCAAgC;gBAC9B,GAAGM,OAAO;gBACVG,WAAW,IAAMV,QAAQW,OAAO,GAAGD,SAAS;YAC9C;QACFE,WAAW;YACT;gBACEC,MAAM;gBACNC,IAAI;gBACJC,cAAc;YAChB;SACD;IACH;AACF"}