@shipfox/api-integration-linear 2.0.0

package/dist/core/tokens.d.ts

@@ -0,0 +1,39 @@
+import { type LinearApiClient } from '#api/client.js';
+export interface LinearConnectionResolverResult {
+    workspaceId: string;
+}
+export interface CreateLinearTokenStoreParams {
+    resolveConnection(connectionId: string): Promise<LinearConnectionResolverResult | undefined>;
+    secrets: LinearSecretsStore;
+    client?: LinearApiClient | undefined;
+}
+export interface LinearSecretsStore {
+    getSecret(params: {
+        workspaceId: string;
+        namespace: string;
+        key: string;
+    }): Promise<string | null>;
+    setSecrets(params: {
+        workspaceId: string;
+        namespace: string;
+        values: Record<string, string>;
+        editedBy?: string | null | undefined;
+    }): Promise<void>;
+}
+export interface StoreLinearTokensParams {
+    connectionId: string;
+    accessToken: string;
+    refreshToken?: string | undefined;
+    editedBy?: string | null | undefined;
+}
+export interface GetLinearAccessTokenParams {
+    connectionId: string;
+    forceRefresh?: boolean | undefined;
+}
+export interface LinearTokenStore {
+    storeTokens(params: StoreLinearTokensParams): Promise<void>;
+    getAccessToken(params: GetLinearAccessTokenParams): Promise<string>;
+}
+export declare function linearSecretsNamespace(connectionId: string): string;
+export declare function createLinearTokenStore(params: CreateLinearTokenStoreParams): LinearTokenStore;
+//# sourceMappingURL=tokens.d.ts.map

package/dist/core/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/core/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,eAAe,EAAC,MAAM,gBAAgB,CAAC;AAkB3E,MAAM,WAAW,8BAA8B;IAC7C,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,8BAA8B,GAAG,SAAS,CAAC,CAAC;IAC7F,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,MAAM,EAAE;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjG,UAAU,CAAC,MAAM,EAAE;QACjB,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;KACtC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,cAAc,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACrE;AAED,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,4BAA4B,GAAG,gBAAgB,CAwE7F"}

package/dist/core/tokens.js

@@ -0,0 +1,117 @@
+import { createLinearApiClient } from '#api/client.js';
+import { LinearAccessTokenMissingError, LinearConnectionNotFoundError, LinearIntegrationProviderError, LinearTokenUnrefreshableError } from '#core/errors.js';
+import { getLinearInstallationByConnectionId, updateLinearInstallationTokenExpiry, withLinearRefreshLock } from '#db/installations.js';
+const ACCESS_TOKEN_KEY = 'ACCESS_TOKEN';
+const REFRESH_TOKEN_KEY = 'REFRESH_TOKEN';
+const TOKEN_REFRESH_MARGIN_MS = 5 * 60 * 1000;
+const tokenRefreshes = new Map();
+export function linearSecretsNamespace(connectionId) {
+    return `system/integrations/linear/${connectionId}`;
+}
+export function createLinearTokenStore(params) {
+    const client = params.client ?? createLinearApiClient();
+    async function resolveWorkspaceId(connectionId) {
+        const connection = await params.resolveConnection(connectionId);
+        if (!connection) throw new LinearConnectionNotFoundError(connectionId);
+        return connection.workspaceId;
+    }
+    function readSecretToken(workspaceId, connectionId, key) {
+        return params.secrets.getSecret({
+            workspaceId,
+            namespace: linearSecretsNamespace(connectionId),
+            key
+        });
+    }
+    async function readAccessToken(workspaceId, connectionId) {
+        const token = await readSecretToken(workspaceId, connectionId, ACCESS_TOKEN_KEY);
+        if (!token) throw new LinearAccessTokenMissingError(connectionId);
+        return token;
+    }
+    return {
+        async storeTokens (input) {
+            const workspaceId = await resolveWorkspaceId(input.connectionId);
+            const values = {
+                [ACCESS_TOKEN_KEY]: input.accessToken
+            };
+            if (input.refreshToken) values[REFRESH_TOKEN_KEY] = input.refreshToken;
+            await params.secrets.setSecrets({
+                workspaceId,
+                namespace: linearSecretsNamespace(input.connectionId),
+                values,
+                editedBy: input.editedBy
+            });
+        },
+        async getAccessToken (input) {
+            const forceRefresh = input.forceRefresh === true;
+            const workspaceId = await resolveWorkspaceId(input.connectionId);
+            const installation = await getLinearInstallationByConnectionId(input.connectionId);
+            const accessToken = await readAccessToken(workspaceId, input.connectionId);
+            if (!forceRefresh && !shouldRefresh(installation?.tokenExpiresAt ?? null)) {
+                return accessToken;
+            }
+            const inFlightRefresh = tokenRefreshes.get(input.connectionId);
+            if (inFlightRefresh) return inFlightRefresh;
+            const refresh = refreshAccessTokenWithLock({
+                connectionId: input.connectionId,
+                workspaceId,
+                originalAccessToken: accessToken,
+                forceRefresh,
+                client,
+                secrets: params.secrets,
+                readAccessToken,
+                readSecretToken
+            });
+            tokenRefreshes.set(input.connectionId, refresh);
+            void refresh.then(()=>clearTokenRefresh(input.connectionId, refresh), ()=>clearTokenRefresh(input.connectionId, refresh));
+            return refresh;
+        }
+    };
+}
+function shouldRefresh(expiresAt) {
+    return expiresAt !== null && expiresAt.getTime() <= Date.now() + TOKEN_REFRESH_MARGIN_MS;
+}
+async function refreshAccessTokenWithLock(params) {
+    const lock = await withLinearRefreshLock(params.connectionId, async ()=>refreshAccessTokenForConnection(params));
+    if (lock.acquired) return lock.value;
+    const rereadToken = await params.readAccessToken(params.workspaceId, params.connectionId);
+    if (rereadToken !== params.originalAccessToken) return rereadToken;
+    if (params.forceRefresh) {
+        throw new LinearIntegrationProviderError('provider-unavailable', 'Linear token refresh is already in progress');
+    }
+    return params.originalAccessToken;
+}
+function clearTokenRefresh(connectionId, refresh) {
+    if (tokenRefreshes.get(connectionId) === refresh) tokenRefreshes.delete(connectionId);
+}
+async function refreshAccessTokenForConnection(params) {
+    const currentAccessToken = await params.readAccessToken(params.workspaceId, params.connectionId);
+    const currentInstallation = await getLinearInstallationByConnectionId(params.connectionId);
+    const tokenChanged = currentAccessToken !== params.originalAccessToken;
+    const isFresh = !params.forceRefresh && !shouldRefresh(currentInstallation?.tokenExpiresAt ?? null);
+    if (tokenChanged || isFresh) return currentAccessToken;
+    const refreshToken = await params.readSecretToken(params.workspaceId, params.connectionId, REFRESH_TOKEN_KEY);
+    if (!refreshToken) {
+        if (params.forceRefresh) throw new LinearTokenUnrefreshableError(params.connectionId);
+        return currentAccessToken;
+    }
+    const refreshed = await params.client.refreshAccessToken({
+        refreshToken
+    });
+    const values = {
+        [ACCESS_TOKEN_KEY]: refreshed.accessToken
+    };
+    if (refreshed.refreshToken) values[REFRESH_TOKEN_KEY] = refreshed.refreshToken;
+    await params.secrets.setSecrets({
+        workspaceId: params.workspaceId,
+        namespace: linearSecretsNamespace(params.connectionId),
+        values
+    });
+    await updateLinearInstallationTokenExpiry({
+        connectionId: params.connectionId,
+        tokenExpiresAt: refreshed.expiresAt ?? null,
+        scopes: refreshed.scopes.length > 0 ? refreshed.scopes : undefined
+    });
+    return refreshed.accessToken;
+}
+
+//# sourceMappingURL=tokens.js.map

package/dist/core/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/tokens.ts"],"sourcesContent":["import {createLinearApiClient, type LinearApiClient} from '#api/client.js';\nimport {\n  LinearAccessTokenMissingError,\n  LinearConnectionNotFoundError,\n  LinearIntegrationProviderError,\n  LinearTokenUnrefreshableError,\n} from '#core/errors.js';\nimport {\n  getLinearInstallationByConnectionId,\n  updateLinearInstallationTokenExpiry,\n  withLinearRefreshLock,\n} from '#db/installations.js';\n\nconst ACCESS_TOKEN_KEY = 'ACCESS_TOKEN';\nconst REFRESH_TOKEN_KEY = 'REFRESH_TOKEN';\nconst TOKEN_REFRESH_MARGIN_MS = 5 * 60 * 1000;\nconst tokenRefreshes = new Map<string, Promise<string>>();\n\nexport interface LinearConnectionResolverResult {\n  workspaceId: string;\n}\n\nexport interface CreateLinearTokenStoreParams {\n  resolveConnection(connectionId: string): Promise<LinearConnectionResolverResult | undefined>;\n  secrets: LinearSecretsStore;\n  client?: LinearApiClient | undefined;\n}\n\nexport interface LinearSecretsStore {\n  getSecret(params: {workspaceId: string; namespace: string; key: string}): Promise<string | null>;\n  setSecrets(params: {\n    workspaceId: string;\n    namespace: string;\n    values: Record<string, string>;\n    editedBy?: string | null | undefined;\n  }): Promise<void>;\n}\n\nexport interface StoreLinearTokensParams {\n  connectionId: string;\n  accessToken: string;\n  refreshToken?: string | undefined;\n  editedBy?: string | null | undefined;\n}\n\nexport interface GetLinearAccessTokenParams {\n  connectionId: string;\n  forceRefresh?: boolean | undefined;\n}\n\nexport interface LinearTokenStore {\n  storeTokens(params: StoreLinearTokensParams): Promise<void>;\n  getAccessToken(params: GetLinearAccessTokenParams): Promise<string>;\n}\n\nexport function linearSecretsNamespace(connectionId: string): string {\n  return `system/integrations/linear/${connectionId}`;\n}\n\nexport function createLinearTokenStore(params: CreateLinearTokenStoreParams): LinearTokenStore {\n  const client = params.client ?? createLinearApiClient();\n\n  async function resolveWorkspaceId(connectionId: string): Promise<string> {\n    const connection = await params.resolveConnection(connectionId);\n    if (!connection) throw new LinearConnectionNotFoundError(connectionId);\n    return connection.workspaceId;\n  }\n\n  function readSecretToken(\n    workspaceId: string,\n    connectionId: string,\n    key: typeof ACCESS_TOKEN_KEY | typeof REFRESH_TOKEN_KEY,\n  ): Promise<string | null> {\n    return params.secrets.getSecret({\n      workspaceId,\n      namespace: linearSecretsNamespace(connectionId),\n      key,\n    });\n  }\n\n  async function readAccessToken(workspaceId: string, connectionId: string): Promise<string> {\n    const token = await readSecretToken(workspaceId, connectionId, ACCESS_TOKEN_KEY);\n    if (!token) throw new LinearAccessTokenMissingError(connectionId);\n    return token;\n  }\n\n  return {\n    async storeTokens(input) {\n      const workspaceId = await resolveWorkspaceId(input.connectionId);\n      const values: Record<string, string> = {[ACCESS_TOKEN_KEY]: input.accessToken};\n      if (input.refreshToken) values[REFRESH_TOKEN_KEY] = input.refreshToken;\n\n      await params.secrets.setSecrets({\n        workspaceId,\n        namespace: linearSecretsNamespace(input.connectionId),\n        values,\n        editedBy: input.editedBy,\n      });\n    },\n\n    async getAccessToken(input) {\n      const forceRefresh = input.forceRefresh === true;\n      const workspaceId = await resolveWorkspaceId(input.connectionId);\n      const installation = await getLinearInstallationByConnectionId(input.connectionId);\n      const accessToken = await readAccessToken(workspaceId, input.connectionId);\n\n      if (!forceRefresh && !shouldRefresh(installation?.tokenExpiresAt ?? null)) {\n        return accessToken;\n      }\n\n      const inFlightRefresh = tokenRefreshes.get(input.connectionId);\n      if (inFlightRefresh) return inFlightRefresh;\n\n      const refresh = refreshAccessTokenWithLock({\n        connectionId: input.connectionId,\n        workspaceId,\n        originalAccessToken: accessToken,\n        forceRefresh,\n        client,\n        secrets: params.secrets,\n        readAccessToken,\n        readSecretToken,\n      });\n      tokenRefreshes.set(input.connectionId, refresh);\n      void refresh.then(\n        () => clearTokenRefresh(input.connectionId, refresh),\n        () => clearTokenRefresh(input.connectionId, refresh),\n      );\n      return refresh;\n    },\n  };\n}\n\nfunction shouldRefresh(expiresAt: Date | null): boolean {\n  return expiresAt !== null && expiresAt.getTime() <= Date.now() + TOKEN_REFRESH_MARGIN_MS;\n}\n\nasync function refreshAccessTokenWithLock(params: {\n  connectionId: string;\n  workspaceId: string;\n  originalAccessToken: string;\n  forceRefresh: boolean;\n  client: LinearApiClient;\n  secrets: LinearSecretsStore;\n  readAccessToken(workspaceId: string, connectionId: string): Promise<string>;\n  readSecretToken(\n    workspaceId: string,\n    connectionId: string,\n    key: typeof ACCESS_TOKEN_KEY | typeof REFRESH_TOKEN_KEY,\n  ): Promise<string | null>;\n}): Promise<string> {\n  const lock = await withLinearRefreshLock(params.connectionId, async () =>\n    refreshAccessTokenForConnection(params),\n  );\n\n  if (lock.acquired) return lock.value;\n\n  const rereadToken = await params.readAccessToken(params.workspaceId, params.connectionId);\n  if (rereadToken !== params.originalAccessToken) return rereadToken;\n  if (params.forceRefresh) {\n    throw new LinearIntegrationProviderError(\n      'provider-unavailable',\n      'Linear token refresh is already in progress',\n    );\n  }\n  return params.originalAccessToken;\n}\n\nfunction clearTokenRefresh(connectionId: string, refresh: Promise<string>): void {\n  if (tokenRefreshes.get(connectionId) === refresh) tokenRefreshes.delete(connectionId);\n}\n\nasync function refreshAccessTokenForConnection(params: {\n  connectionId: string;\n  workspaceId: string;\n  originalAccessToken: string;\n  forceRefresh: boolean;\n  client: LinearApiClient;\n  secrets: LinearSecretsStore;\n  readAccessToken(workspaceId: string, connectionId: string): Promise<string>;\n  readSecretToken(\n    workspaceId: string,\n    connectionId: string,\n    key: typeof ACCESS_TOKEN_KEY | typeof REFRESH_TOKEN_KEY,\n  ): Promise<string | null>;\n}): Promise<string> {\n  const currentAccessToken = await params.readAccessToken(params.workspaceId, params.connectionId);\n  const currentInstallation = await getLinearInstallationByConnectionId(params.connectionId);\n  const tokenChanged = currentAccessToken !== params.originalAccessToken;\n  const isFresh =\n    !params.forceRefresh && !shouldRefresh(currentInstallation?.tokenExpiresAt ?? null);\n  if (tokenChanged || isFresh) return currentAccessToken;\n\n  const refreshToken = await params.readSecretToken(\n    params.workspaceId,\n    params.connectionId,\n    REFRESH_TOKEN_KEY,\n  );\n  if (!refreshToken) {\n    if (params.forceRefresh) throw new LinearTokenUnrefreshableError(params.connectionId);\n    return currentAccessToken;\n  }\n\n  const refreshed = await params.client.refreshAccessToken({refreshToken});\n  const values: Record<string, string> = {[ACCESS_TOKEN_KEY]: refreshed.accessToken};\n  if (refreshed.refreshToken) values[REFRESH_TOKEN_KEY] = refreshed.refreshToken;\n  await params.secrets.setSecrets({\n    workspaceId: params.workspaceId,\n    namespace: linearSecretsNamespace(params.connectionId),\n    values,\n  });\n  await updateLinearInstallationTokenExpiry({\n    connectionId: params.connectionId,\n    tokenExpiresAt: refreshed.expiresAt ?? null,\n    scopes: refreshed.scopes.length > 0 ? refreshed.scopes : undefined,\n  });\n\n  return refreshed.accessToken;\n}\n"],"names":["createLinearApiClient","LinearAccessTokenMissingError","LinearConnectionNotFoundError","LinearIntegrationProviderError","LinearTokenUnrefreshableError","getLinearInstallationByConnectionId","updateLinearInstallationTokenExpiry","withLinearRefreshLock","ACCESS_TOKEN_KEY","REFRESH_TOKEN_KEY","TOKEN_REFRESH_MARGIN_MS","tokenRefreshes","Map","linearSecretsNamespace","connectionId","createLinearTokenStore","params","client","resolveWorkspaceId","connection","resolveConnection","workspaceId","readSecretToken","key","secrets","getSecret","namespace","readAccessToken","token","storeTokens","input","values","accessToken","refreshToken","setSecrets","editedBy","getAccessToken","forceRefresh","installation","shouldRefresh","tokenExpiresAt","inFlightRefresh","get","refresh","refreshAccessTokenWithLock","originalAccessToken","set","then","clearTokenRefresh","expiresAt","getTime","Date","now","lock","refreshAccessTokenForConnection","acquired","value","rereadToken","delete","currentAccessToken","currentInstallation","tokenChanged","isFresh","refreshed","refreshAccessToken","scopes","length","undefined"],"mappings":"AAAA,SAAQA,qBAAqB,QAA6B,iBAAiB;AAC3E,SACEC,6BAA6B,EAC7BC,6BAA6B,EAC7BC,8BAA8B,EAC9BC,6BAA6B,QACxB,kBAAkB;AACzB,SACEC,mCAAmC,EACnCC,mCAAmC,EACnCC,qBAAqB,QAChB,uBAAuB;AAE9B,MAAMC,mBAAmB;AACzB,MAAMC,oBAAoB;AAC1B,MAAMC,0BAA0B,IAAI,KAAK;AACzC,MAAMC,iBAAiB,IAAIC;AAuC3B,OAAO,SAASC,uBAAuBC,YAAoB;IACzD,OAAO,CAAC,2BAA2B,EAAEA,cAAc;AACrD;AAEA,OAAO,SAASC,uBAAuBC,MAAoC;IACzE,MAAMC,SAASD,OAAOC,MAAM,IAAIjB;IAEhC,eAAekB,mBAAmBJ,YAAoB;QACpD,MAAMK,aAAa,MAAMH,OAAOI,iBAAiB,CAACN;QAClD,IAAI,CAACK,YAAY,MAAM,IAAIjB,8BAA8BY;QACzD,OAAOK,WAAWE,WAAW;IAC/B;IAEA,SAASC,gBACPD,WAAmB,EACnBP,YAAoB,EACpBS,GAAuD;QAEvD,OAAOP,OAAOQ,OAAO,CAACC,SAAS,CAAC;YAC9BJ;YACAK,WAAWb,uBAAuBC;YAClCS;QACF;IACF;IAEA,eAAeI,gBAAgBN,WAAmB,EAAEP,YAAoB;QACtE,MAAMc,QAAQ,MAAMN,gBAAgBD,aAAaP,cAAcN;QAC/D,IAAI,CAACoB,OAAO,MAAM,IAAI3B,8BAA8Ba;QACpD,OAAOc;IACT;IAEA,OAAO;QACL,MAAMC,aAAYC,KAAK;YACrB,MAAMT,cAAc,MAAMH,mBAAmBY,MAAMhB,YAAY;YAC/D,MAAMiB,SAAiC;gBAAC,CAACvB,iBAAiB,EAAEsB,MAAME,WAAW;YAAA;YAC7E,IAAIF,MAAMG,YAAY,EAAEF,MAAM,CAACtB,kBAAkB,GAAGqB,MAAMG,YAAY;YAEtE,MAAMjB,OAAOQ,OAAO,CAACU,UAAU,CAAC;gBAC9Bb;gBACAK,WAAWb,uBAAuBiB,MAAMhB,YAAY;gBACpDiB;gBACAI,UAAUL,MAAMK,QAAQ;YAC1B;QACF;QAEA,MAAMC,gBAAeN,KAAK;YACxB,MAAMO,eAAeP,MAAMO,YAAY,KAAK;YAC5C,MAAMhB,cAAc,MAAMH,mBAAmBY,MAAMhB,YAAY;YAC/D,MAAMwB,eAAe,MAAMjC,oCAAoCyB,MAAMhB,YAAY;YACjF,MAAMkB,cAAc,MAAML,gBAAgBN,aAAaS,MAAMhB,YAAY;YAEzE,IAAI,CAACuB,gBAAgB,CAACE,cAAcD,cAAcE,kBAAkB,OAAO;gBACzE,OAAOR;YACT;YAEA,MAAMS,kBAAkB9B,eAAe+B,GAAG,CAACZ,MAAMhB,YAAY;YAC7D,IAAI2B,iBAAiB,OAAOA;YAE5B,MAAME,UAAUC,2BAA2B;gBACzC9B,cAAcgB,MAAMhB,YAAY;gBAChCO;gBACAwB,qBAAqBb;gBACrBK;gBACApB;gBACAO,SAASR,OAAOQ,OAAO;gBACvBG;gBACAL;YACF;YACAX,eAAemC,GAAG,CAAChB,MAAMhB,YAAY,EAAE6B;YACvC,KAAKA,QAAQI,IAAI,CACf,IAAMC,kBAAkBlB,MAAMhB,YAAY,EAAE6B,UAC5C,IAAMK,kBAAkBlB,MAAMhB,YAAY,EAAE6B;YAE9C,OAAOA;QACT;IACF;AACF;AAEA,SAASJ,cAAcU,SAAsB;IAC3C,OAAOA,cAAc,QAAQA,UAAUC,OAAO,MAAMC,KAAKC,GAAG,KAAK1C;AACnE;AAEA,eAAekC,2BAA2B5B,MAazC;IACC,MAAMqC,OAAO,MAAM9C,sBAAsBS,OAAOF,YAAY,EAAE,UAC5DwC,gCAAgCtC;IAGlC,IAAIqC,KAAKE,QAAQ,EAAE,OAAOF,KAAKG,KAAK;IAEpC,MAAMC,cAAc,MAAMzC,OAAOW,eAAe,CAACX,OAAOK,WAAW,EAAEL,OAAOF,YAAY;IACxF,IAAI2C,gBAAgBzC,OAAO6B,mBAAmB,EAAE,OAAOY;IACvD,IAAIzC,OAAOqB,YAAY,EAAE;QACvB,MAAM,IAAIlC,+BACR,wBACA;IAEJ;IACA,OAAOa,OAAO6B,mBAAmB;AACnC;AAEA,SAASG,kBAAkBlC,YAAoB,EAAE6B,OAAwB;IACvE,IAAIhC,eAAe+B,GAAG,CAAC5B,kBAAkB6B,SAAShC,eAAe+C,MAAM,CAAC5C;AAC1E;AAEA,eAAewC,gCAAgCtC,MAa9C;IACC,MAAM2C,qBAAqB,MAAM3C,OAAOW,eAAe,CAACX,OAAOK,WAAW,EAAEL,OAAOF,YAAY;IAC/F,MAAM8C,sBAAsB,MAAMvD,oCAAoCW,OAAOF,YAAY;IACzF,MAAM+C,eAAeF,uBAAuB3C,OAAO6B,mBAAmB;IACtE,MAAMiB,UACJ,CAAC9C,OAAOqB,YAAY,IAAI,CAACE,cAAcqB,qBAAqBpB,kBAAkB;IAChF,IAAIqB,gBAAgBC,SAAS,OAAOH;IAEpC,MAAM1B,eAAe,MAAMjB,OAAOM,eAAe,CAC/CN,OAAOK,WAAW,EAClBL,OAAOF,YAAY,EACnBL;IAEF,IAAI,CAACwB,cAAc;QACjB,IAAIjB,OAAOqB,YAAY,EAAE,MAAM,IAAIjC,8BAA8BY,OAAOF,YAAY;QACpF,OAAO6C;IACT;IAEA,MAAMI,YAAY,MAAM/C,OAAOC,MAAM,CAAC+C,kBAAkB,CAAC;QAAC/B;IAAY;IACtE,MAAMF,SAAiC;QAAC,CAACvB,iBAAiB,EAAEuD,UAAU/B,WAAW;IAAA;IACjF,IAAI+B,UAAU9B,YAAY,EAAEF,MAAM,CAACtB,kBAAkB,GAAGsD,UAAU9B,YAAY;IAC9E,MAAMjB,OAAOQ,OAAO,CAACU,UAAU,CAAC;QAC9Bb,aAAaL,OAAOK,WAAW;QAC/BK,WAAWb,uBAAuBG,OAAOF,YAAY;QACrDiB;IACF;IACA,MAAMzB,oCAAoC;QACxCQ,cAAcE,OAAOF,YAAY;QACjC0B,gBAAgBuB,UAAUd,SAAS,IAAI;QACvCgB,QAAQF,UAAUE,MAAM,CAACC,MAAM,GAAG,IAAIH,UAAUE,MAAM,GAAGE;IAC3D;IAEA,OAAOJ,UAAU/B,WAAW;AAC9B"}

package/dist/core/webhook.d.ts

@@ -0,0 +1,16 @@
+import type { GetIntegrationConnectionByIdFn, IntegrationTx, PublishIntegrationEventReceivedFn, RecordDeliveryOnlyFn } from '@shipfox/api-integration-core-dto';
+import { type LinearWebhookBaseEnvelopeDto } from '@shipfox/api-integration-linear-dto';
+export interface HandleLinearWebhookParams {
+    tx: IntegrationTx;
+    deliveryId: string;
+    payload: LinearWebhookBaseEnvelopeDto;
+    rawPayload: unknown;
+    publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;
+    recordDeliveryOnly: RecordDeliveryOnlyFn;
+    getIntegrationConnectionById: GetIntegrationConnectionByIdFn;
+}
+export type HandleLinearWebhookOutcome = 'published' | 'duplicate' | 'unknown-organization' | 'revoked-installation' | 'missing-connection' | 'inactive-connection' | 'unsupported-event';
+export declare function handleLinearWebhook(params: HandleLinearWebhookParams): Promise<{
+    outcome: HandleLinearWebhookOutcome;
+}>;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/core/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/core/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,8BAA8B,EAC9B,aAAa,EACb,iCAAiC,EACjC,oBAAoB,EACrB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAEL,KAAK,4BAA4B,EAIlC,MAAM,qCAAqC,CAAC;AAI7C,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,aAAa,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,4BAA4B,CAAC;IACtC,UAAU,EAAE,OAAO,CAAC;IACpB,+BAA+B,EAAE,iCAAiC,CAAC;IACnE,kBAAkB,EAAE,oBAAoB,CAAC;IACzC,4BAA4B,EAAE,8BAA8B,CAAC;CAC9D;AAED,MAAM,MAAM,0BAA0B,GAClC,WAAW,GACX,WAAW,GACX,sBAAsB,GACtB,sBAAsB,GACtB,oBAAoB,GACpB,qBAAqB,GACrB,mBAAmB,CAAC;AAExB,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC;IAAC,OAAO,EAAE,0BAA0B,CAAA;CAAC,CAAC,CA2FhD"}

package/dist/core/webhook.js

@@ -0,0 +1,105 @@
+import { LINEAR_PROVIDER, linearWebhookEnvelopeSchema } from '@shipfox/api-integration-linear-dto';
+import { logger } from '@shipfox/node-opentelemetry';
+import { getLinearInstallationByOrganizationId } from '#db/installations.js';
+export async function handleLinearWebhook(params) {
+    const installation = await getLinearInstallationByOrganizationId(params.payload.organizationId, {
+        tx: params.tx
+    });
+    if (!installation) {
+        logger().warn({
+            deliveryId: params.deliveryId,
+            organizationId: params.payload.organizationId
+        }, 'linear webhook: unknown organization, dropping');
+        await recordDeliveryOnly(params);
+        return {
+            outcome: 'unknown-organization'
+        };
+    }
+    if (installation.status !== 'installed') {
+        logger().info({
+            deliveryId: params.deliveryId,
+            organizationId: params.payload.organizationId,
+            connectionId: installation.connectionId,
+            status: installation.status
+        }, 'linear webhook: installation is not installed, dropping');
+        await recordDeliveryOnly(params);
+        return {
+            outcome: 'revoked-installation'
+        };
+    }
+    const connection = await params.getIntegrationConnectionById(installation.connectionId, {
+        tx: params.tx
+    });
+    if (!connection) {
+        logger().warn({
+            deliveryId: params.deliveryId,
+            organizationId: params.payload.organizationId,
+            connectionId: installation.connectionId
+        }, 'linear webhook: installation has no connection, dropping');
+        await recordDeliveryOnly(params);
+        return {
+            outcome: 'missing-connection'
+        };
+    }
+    if (connection.lifecycleStatus !== 'active') {
+        const logContext = {
+            deliveryId: params.deliveryId,
+            organizationId: params.payload.organizationId,
+            connectionId: connection.id,
+            workspaceId: connection.workspaceId,
+            lifecycleStatus: connection.lifecycleStatus
+        };
+        if (connection.lifecycleStatus === 'error') {
+            logger().warn(logContext, 'linear webhook: connection in error state, dropping');
+        } else {
+            logger().info(logContext, 'linear webhook: connection disabled, dropping');
+        }
+        await recordDeliveryOnly(params);
+        return {
+            outcome: 'inactive-connection'
+        };
+    }
+    const supported = linearWebhookEnvelopeSchema.safeParse(params.payload);
+    if (!supported.success) {
+        logger().info({
+            deliveryId: params.deliveryId,
+            organizationId: params.payload.organizationId,
+            type: params.payload.type,
+            action: params.payload.action
+        }, 'linear webhook: unsupported event, dropping');
+        await recordDeliveryOnly(params);
+        return {
+            outcome: 'unsupported-event'
+        };
+    }
+    const result = await params.publishIntegrationEventReceived({
+        tx: params.tx,
+        event: {
+            provider: LINEAR_PROVIDER,
+            source: connection.slug,
+            event: linearWebhookEventName(supported.data),
+            workspaceId: connection.workspaceId,
+            connectionId: connection.id,
+            connectionName: connection.displayName,
+            deliveryId: params.deliveryId,
+            receivedAt: new Date().toISOString(),
+            payload: params.rawPayload
+        }
+    });
+    return {
+        outcome: result.published ? 'published' : 'duplicate'
+    };
+}
+function linearWebhookEventName(payload) {
+    if (payload.type === 'AgentSessionEvent') return `agentSession.${payload.action}`;
+    return `${payload.type}.${payload.action}`;
+}
+async function recordDeliveryOnly(params) {
+    await params.recordDeliveryOnly({
+        tx: params.tx,
+        provider: LINEAR_PROVIDER,
+        deliveryId: params.deliveryId
+    });
+}
+
+//# sourceMappingURL=webhook.js.map

package/dist/core/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/webhook.ts"],"sourcesContent":["import type {\n  GetIntegrationConnectionByIdFn,\n  IntegrationTx,\n  PublishIntegrationEventReceivedFn,\n  RecordDeliveryOnlyFn,\n} from '@shipfox/api-integration-core-dto';\nimport {\n  LINEAR_PROVIDER,\n  type LinearWebhookBaseEnvelopeDto,\n  type LinearWebhookEnvelopeDto,\n  type LinearWebhookEventName,\n  linearWebhookEnvelopeSchema,\n} from '@shipfox/api-integration-linear-dto';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport {getLinearInstallationByOrganizationId} from '#db/installations.js';\n\nexport interface HandleLinearWebhookParams {\n  tx: IntegrationTx;\n  deliveryId: string;\n  payload: LinearWebhookBaseEnvelopeDto;\n  rawPayload: unknown;\n  publishIntegrationEventReceived: PublishIntegrationEventReceivedFn;\n  recordDeliveryOnly: RecordDeliveryOnlyFn;\n  getIntegrationConnectionById: GetIntegrationConnectionByIdFn;\n}\n\nexport type HandleLinearWebhookOutcome =\n  | 'published'\n  | 'duplicate'\n  | 'unknown-organization'\n  | 'revoked-installation'\n  | 'missing-connection'\n  | 'inactive-connection'\n  | 'unsupported-event';\n\nexport async function handleLinearWebhook(\n  params: HandleLinearWebhookParams,\n): Promise<{outcome: HandleLinearWebhookOutcome}> {\n  const installation = await getLinearInstallationByOrganizationId(params.payload.organizationId, {\n    tx: params.tx,\n  });\n  if (!installation) {\n    logger().warn(\n      {deliveryId: params.deliveryId, organizationId: params.payload.organizationId},\n      'linear webhook: unknown organization, dropping',\n    );\n    await recordDeliveryOnly(params);\n    return {outcome: 'unknown-organization'};\n  }\n\n  if (installation.status !== 'installed') {\n    logger().info(\n      {\n        deliveryId: params.deliveryId,\n        organizationId: params.payload.organizationId,\n        connectionId: installation.connectionId,\n        status: installation.status,\n      },\n      'linear webhook: installation is not installed, dropping',\n    );\n    await recordDeliveryOnly(params);\n    return {outcome: 'revoked-installation'};\n  }\n\n  const connection = await params.getIntegrationConnectionById(installation.connectionId, {\n    tx: params.tx,\n  });\n  if (!connection) {\n    logger().warn(\n      {\n        deliveryId: params.deliveryId,\n        organizationId: params.payload.organizationId,\n        connectionId: installation.connectionId,\n      },\n      'linear webhook: installation has no connection, dropping',\n    );\n    await recordDeliveryOnly(params);\n    return {outcome: 'missing-connection'};\n  }\n\n  if (connection.lifecycleStatus !== 'active') {\n    const logContext = {\n      deliveryId: params.deliveryId,\n      organizationId: params.payload.organizationId,\n      connectionId: connection.id,\n      workspaceId: connection.workspaceId,\n      lifecycleStatus: connection.lifecycleStatus,\n    };\n    if (connection.lifecycleStatus === 'error') {\n      logger().warn(logContext, 'linear webhook: connection in error state, dropping');\n    } else {\n      logger().info(logContext, 'linear webhook: connection disabled, dropping');\n    }\n    await recordDeliveryOnly(params);\n    return {outcome: 'inactive-connection'};\n  }\n\n  const supported = linearWebhookEnvelopeSchema.safeParse(params.payload);\n  if (!supported.success) {\n    logger().info(\n      {\n        deliveryId: params.deliveryId,\n        organizationId: params.payload.organizationId,\n        type: params.payload.type,\n        action: params.payload.action,\n      },\n      'linear webhook: unsupported event, dropping',\n    );\n    await recordDeliveryOnly(params);\n    return {outcome: 'unsupported-event'};\n  }\n\n  const result = await params.publishIntegrationEventReceived({\n    tx: params.tx,\n    event: {\n      provider: LINEAR_PROVIDER,\n      source: connection.slug,\n      event: linearWebhookEventName(supported.data),\n      workspaceId: connection.workspaceId,\n      connectionId: connection.id,\n      connectionName: connection.displayName,\n      deliveryId: params.deliveryId,\n      receivedAt: new Date().toISOString(),\n      payload: params.rawPayload,\n    },\n  });\n\n  return {outcome: result.published ? 'published' : 'duplicate'};\n}\n\nfunction linearWebhookEventName(payload: LinearWebhookEnvelopeDto): LinearWebhookEventName {\n  if (payload.type === 'AgentSessionEvent') return `agentSession.${payload.action}`;\n  return `${payload.type}.${payload.action}`;\n}\n\nasync function recordDeliveryOnly(params: {\n  tx: IntegrationTx;\n  deliveryId: string;\n  recordDeliveryOnly: RecordDeliveryOnlyFn;\n}): Promise<void> {\n  await params.recordDeliveryOnly({\n    tx: params.tx,\n    provider: LINEAR_PROVIDER,\n    deliveryId: params.deliveryId,\n  });\n}\n"],"names":["LINEAR_PROVIDER","linearWebhookEnvelopeSchema","logger","getLinearInstallationByOrganizationId","handleLinearWebhook","params","installation","payload","organizationId","tx","warn","deliveryId","recordDeliveryOnly","outcome","status","info","connectionId","connection","getIntegrationConnectionById","lifecycleStatus","logContext","id","workspaceId","supported","safeParse","success","type","action","result","publishIntegrationEventReceived","event","provider","source","slug","linearWebhookEventName","data","connectionName","displayName","receivedAt","Date","toISOString","rawPayload","published"],"mappings":"AAMA,SACEA,eAAe,EAIfC,2BAA2B,QACtB,sCAAsC;AAC7C,SAAQC,MAAM,QAAO,8BAA8B;AACnD,SAAQC,qCAAqC,QAAO,uBAAuB;AAqB3E,OAAO,eAAeC,oBACpBC,MAAiC;IAEjC,MAAMC,eAAe,MAAMH,sCAAsCE,OAAOE,OAAO,CAACC,cAAc,EAAE;QAC9FC,IAAIJ,OAAOI,EAAE;IACf;IACA,IAAI,CAACH,cAAc;QACjBJ,SAASQ,IAAI,CACX;YAACC,YAAYN,OAAOM,UAAU;YAAEH,gBAAgBH,OAAOE,OAAO,CAACC,cAAc;QAAA,GAC7E;QAEF,MAAMI,mBAAmBP;QACzB,OAAO;YAACQ,SAAS;QAAsB;IACzC;IAEA,IAAIP,aAAaQ,MAAM,KAAK,aAAa;QACvCZ,SAASa,IAAI,CACX;YACEJ,YAAYN,OAAOM,UAAU;YAC7BH,gBAAgBH,OAAOE,OAAO,CAACC,cAAc;YAC7CQ,cAAcV,aAAaU,YAAY;YACvCF,QAAQR,aAAaQ,MAAM;QAC7B,GACA;QAEF,MAAMF,mBAAmBP;QACzB,OAAO;YAACQ,SAAS;QAAsB;IACzC;IAEA,MAAMI,aAAa,MAAMZ,OAAOa,4BAA4B,CAACZ,aAAaU,YAAY,EAAE;QACtFP,IAAIJ,OAAOI,EAAE;IACf;IACA,IAAI,CAACQ,YAAY;QACff,SAASQ,IAAI,CACX;YACEC,YAAYN,OAAOM,UAAU;YAC7BH,gBAAgBH,OAAOE,OAAO,CAACC,cAAc;YAC7CQ,cAAcV,aAAaU,YAAY;QACzC,GACA;QAEF,MAAMJ,mBAAmBP;QACzB,OAAO;YAACQ,SAAS;QAAoB;IACvC;IAEA,IAAII,WAAWE,eAAe,KAAK,UAAU;QAC3C,MAAMC,aAAa;YACjBT,YAAYN,OAAOM,UAAU;YAC7BH,gBAAgBH,OAAOE,OAAO,CAACC,cAAc;YAC7CQ,cAAcC,WAAWI,EAAE;YAC3BC,aAAaL,WAAWK,WAAW;YACnCH,iBAAiBF,WAAWE,eAAe;QAC7C;QACA,IAAIF,WAAWE,eAAe,KAAK,SAAS;YAC1CjB,SAASQ,IAAI,CAACU,YAAY;QAC5B,OAAO;YACLlB,SAASa,IAAI,CAACK,YAAY;QAC5B;QACA,MAAMR,mBAAmBP;QACzB,OAAO;YAACQ,SAAS;QAAqB;IACxC;IAEA,MAAMU,YAAYtB,4BAA4BuB,SAAS,CAACnB,OAAOE,OAAO;IACtE,IAAI,CAACgB,UAAUE,OAAO,EAAE;QACtBvB,SAASa,IAAI,CACX;YACEJ,YAAYN,OAAOM,UAAU;YAC7BH,gBAAgBH,OAAOE,OAAO,CAACC,cAAc;YAC7CkB,MAAMrB,OAAOE,OAAO,CAACmB,IAAI;YACzBC,QAAQtB,OAAOE,OAAO,CAACoB,MAAM;QAC/B,GACA;QAEF,MAAMf,mBAAmBP;QACzB,OAAO;YAACQ,SAAS;QAAmB;IACtC;IAEA,MAAMe,SAAS,MAAMvB,OAAOwB,+BAA+B,CAAC;QAC1DpB,IAAIJ,OAAOI,EAAE;QACbqB,OAAO;YACLC,UAAU/B;YACVgC,QAAQf,WAAWgB,IAAI;YACvBH,OAAOI,uBAAuBX,UAAUY,IAAI;YAC5Cb,aAAaL,WAAWK,WAAW;YACnCN,cAAcC,WAAWI,EAAE;YAC3Be,gBAAgBnB,WAAWoB,WAAW;YACtC1B,YAAYN,OAAOM,UAAU;YAC7B2B,YAAY,IAAIC,OAAOC,WAAW;YAClCjC,SAASF,OAAOoC,UAAU;QAC5B;IACF;IAEA,OAAO;QAAC5B,SAASe,OAAOc,SAAS,GAAG,cAAc;IAAW;AAC/D;AAEA,SAASR,uBAAuB3B,OAAiC;IAC/D,IAAIA,QAAQmB,IAAI,KAAK,qBAAqB,OAAO,CAAC,aAAa,EAAEnB,QAAQoB,MAAM,EAAE;IACjF,OAAO,GAAGpB,QAAQmB,IAAI,CAAC,CAAC,EAAEnB,QAAQoB,MAAM,EAAE;AAC5C;AAEA,eAAef,mBAAmBP,MAIjC;IACC,MAAMA,OAAOO,kBAAkB,CAAC;QAC9BH,IAAIJ,OAAOI,EAAE;QACbsB,UAAU/B;QACVW,YAAYN,OAAOM,UAAU;IAC/B;AACF"}