@cursor/july 0.1.1

package/dist/channels/github/github-channel.js

@@ -0,0 +1,1688 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { z } from "zod";
+import { allowAll, defineChannel, localDevStrict, loopbackGitHubDev, POST, } from "../../channels.js";
+import { isDevMode } from "../../internal/dev-mode.js";
+import { resolveCredentialValue } from "./auth.js";
+import { buildGitHubBinding, } from "./binding.js";
+import { buildDefaultGitHubEvents } from "./defaults.js";
+import { deriveGitHubWebhookEvents, GITHUB_CHANNEL_KIND } from "./events.js";
+import { emptyGitHubChannelState, githubBindingStateForEvent, } from "./state.js";
+const DEFAULT_PULL_REQUEST_ACTIONS = new Set([
+    "opened",
+    "reopened",
+    "synchronize",
+    "ready_for_review",
+]);
+const repositorySchema = z.object({
+    id: z.number().optional(),
+    full_name: z.string().min(1),
+    html_url: z.string().url(),
+    name: z.string().optional(),
+    owner: z
+        .object({
+        login: z.string().optional(),
+    })
+        .optional(),
+});
+const senderSchema = z
+    .object({
+    login: z.string().min(1).optional(),
+    id: z.number().optional(),
+    type: z.string().optional(),
+})
+    .nullable()
+    .optional();
+const installationSchema = z
+    .object({
+    id: z.number().optional(),
+})
+    .nullable()
+    .optional();
+const githubPullRequestPayloadSchema = z.object({
+    action: z.string().min(1),
+    repository: repositorySchema,
+    pull_request: z.object({
+        number: z.number().int().positive(),
+        html_url: z.string().url(),
+        title: z.string(),
+        body: z.string().nullable().optional(),
+        draft: z.boolean().optional(),
+        user: z
+            .object({
+            login: z.string().min(1).optional(),
+            id: z.number().optional(),
+            type: z.string().optional(),
+        })
+            .nullable()
+            .optional(),
+        head: z.object({
+            ref: z.string().min(1),
+            sha: z.string().min(1),
+        }),
+        base: z.object({
+            ref: z.string().min(1),
+            sha: z.string().optional(),
+        }),
+    }),
+    sender: senderSchema,
+    installation: installationSchema,
+});
+/**
+ * Derive the turn's auth from the actor that triggered the delivery — the
+ * standard `{ auth: defaultGitHubAuth(ctx) }` dispatch from an inbound hook.
+ */
+export function defaultGitHubAuth(ctx) {
+    var _a, _b, _c;
+    var _d;
+    const senderId = (_a = ctx.sender) === null || _a === void 0 ? void 0 : _a.id;
+    return {
+        authenticator: "github-webhook",
+        principalId: senderId !== undefined
+            ? `github:${senderId}`
+            : ((_d = ctx.senderLogin) !== null && _d !== void 0 ? _d : "github"),
+        principalType: ((_b = ctx.sender) === null || _b === void 0 ? void 0 : _b.type) === "Bot" ? "service" : "user",
+        attributes: Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ conversation_kind: ctx.conversation.kind }, (ctx.deliveryId === undefined ? {} : { delivery_id: ctx.deliveryId })), (ctx.installationId === undefined
+            ? {}
+            : { installation_id: String(ctx.installationId) })), { repository: ctx.repository.fullName }), (ctx.repository.id === undefined
+            ? {}
+            : { repository_id: String(ctx.repository.id) })), (ctx.senderLogin === undefined ? {} : { user_login: ctx.senderLogin })), (((_c = ctx.sender) === null || _c === void 0 ? void 0 : _c.type) === undefined ? {} : { user_type: ctx.sender.type })), (ctx.repository.owner === ""
+            ? {}
+            : { issuer: `github:${ctx.repository.owner}` })), (ctx.senderLogin === undefined ? {} : { subject: ctx.senderLogin })),
+    };
+}
+export function githubContinuationKey(ctx) {
+    const kind = ctx.conversation.kind === "issue" ? "github-issue" : "github-pr";
+    return `${kind}:${ctx.repository.fullName}#${ctx.conversation.number}`;
+}
+/** @deprecated Prefer {@link githubContinuationKey}. */
+export function githubPullRequestContinuationKey(ctx) {
+    return githubContinuationKey(ctx);
+}
+export function defaultGitHubTitle(ctx) {
+    return `GitHub ${ctx.repository.fullName}#${ctx.conversation.number}`;
+}
+/** @deprecated Prefer {@link defaultGitHubTitle}. */
+export function defaultGitHubPullRequestTitle(ctx) {
+    return defaultGitHubTitle(ctx);
+}
+export function defaultGitHubPullRequestMessage(ctx, pullRequest) {
+    return [
+        `GitHub pull request trigger: ${ctx.repository.fullName}#${pullRequest.number}`,
+        `Action: ${pullRequest.action}`,
+        `PR: ${pullRequest.url}`,
+        `Title: ${pullRequest.title}`,
+        `Head: ${pullRequest.headRef} (${pullRequest.headSha})`,
+        `Base: ${pullRequest.baseRef}`,
+        ...(pullRequest.authorLogin === undefined
+            ? []
+            : [`Author: ${pullRequest.authorLogin}`]),
+        ...(ctx.senderLogin === undefined ? [] : [`Sender: ${ctx.senderLogin}`]),
+        "",
+        "Handle this pull request event.",
+    ].join("\n");
+}
+/**
+ * Default dispatch gate when no `onPullRequest` hook is declared: the common
+ * review triggers start a turn as the delivery's actor.
+ *
+ * Eve has no default for `onPullRequest` (opt-in only). Agent-serve keeps this
+ * gate for backward compatibility with existing demos.
+ */
+export function defaultGitHubPullRequestDispatch(ctx, pullRequest) {
+    if (!DEFAULT_PULL_REQUEST_ACTIONS.has(pullRequest.action)) {
+        return null;
+    }
+    return { auth: defaultGitHubAuth(ctx) };
+}
+/**
+ * Default comment hook (Eve-compatible): dispatch only when the comment
+ * `@mention`s {@link botName}.
+ */
+export function defaultOnComment(ctx, comment, options) {
+    if (!shouldDispatchGitHubComment({
+        body: comment.body,
+        author: comment.author,
+        botName: options.botName,
+    })) {
+        return null;
+    }
+    return { auth: defaultGitHubAuth(ctx) };
+}
+function isTaskDispatch(dispatch) {
+    return "task" in dispatch;
+}
+export function shouldDispatchGitHubComment(args) {
+    var _a;
+    const botName = (_a = args.botName) === null || _a === void 0 ? void 0 : _a.trim();
+    if (botName === undefined || botName === "") {
+        return false;
+    }
+    if (isGitHubAppBotAuthor(args.author, botName)) {
+        return false;
+    }
+    const mention = new RegExp(`(^|\\W)@${escapeRegExp(botName)}\\b`, "i");
+    return mention.test(args.body);
+}
+export function extractGitHubCommentTrigger(args) {
+    var _a;
+    const botName = (_a = args.botName) === null || _a === void 0 ? void 0 : _a.trim();
+    if (botName === undefined || botName === "") {
+        const trimmed = args.body.trim();
+        return trimmed === "" ? undefined : { message: trimmed };
+    }
+    const mention = new RegExp(`@${escapeRegExp(botName)}\\b[,:]?\\s*`, "i");
+    const stripped = args.body.replace(mention, "").trim();
+    if (stripped === "") {
+        return { message: args.body.trim() };
+    }
+    return { message: stripped };
+}
+export function parseGitHubPullRequestEvent(args) {
+    var _a, _b;
+    var _c;
+    const parsed = githubPullRequestPayloadSchema.safeParse(args.payload);
+    if (!parsed.success) {
+        return null;
+    }
+    const payload = parsed.data;
+    const repository = toRepositoryRef(payload.repository);
+    const sender = toUser(payload.sender);
+    const installationId = (_a = payload.installation) === null || _a === void 0 ? void 0 : _a.id;
+    const ctx = Object.assign(Object.assign(Object.assign(Object.assign({}, (args.deliveryId === undefined ? {} : { deliveryId: args.deliveryId })), { eventName: "pull_request", repository, conversation: {
+            kind: "pull_request",
+            number: payload.pull_request.number,
+            url: payload.pull_request.html_url,
+        } }), (sender === undefined ? {} : { sender, senderLogin: sender.login })), (installationId === undefined ? {} : { installationId }));
+    const pullRequest = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ action: payload.action, number: payload.pull_request.number, url: payload.pull_request.html_url, title: payload.pull_request.title }, (payload.pull_request.body === undefined ||
+        payload.pull_request.body === null
+        ? {}
+        : { body: payload.pull_request.body })), { headRef: payload.pull_request.head.ref, headSha: payload.pull_request.head.sha, baseRef: payload.pull_request.base.ref }), (payload.pull_request.base.sha === undefined
+        ? {}
+        : { baseSha: payload.pull_request.base.sha })), { draft: (_c = payload.pull_request.draft) !== null && _c !== void 0 ? _c : false }), (((_b = payload.pull_request.user) === null || _b === void 0 ? void 0 : _b.login) === undefined
+        ? {}
+        : { authorLogin: payload.pull_request.user.login }));
+    return { ctx, pullRequest };
+}
+export function verifyGitHubWebhookSignature(args) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const secret = yield resolveCredentialValue(args.secret);
+        if (secret === undefined || secret === "") {
+            return "missing_secret";
+        }
+        if (args.signatureHeader === null) {
+            return "missing_signature";
+        }
+        const isVerified = verifyWebhookSha256Signature({
+            secret,
+            body: args.body,
+            signatureHeader: args.signatureHeader,
+        });
+        return isVerified ? "verified" : "mismatch";
+    });
+}
+function verifyWebhookSha256Signature(args) {
+    const prefix = "sha256=";
+    if (!args.signatureHeader.startsWith(prefix)) {
+        return false;
+    }
+    const receivedHex = args.signatureHeader.slice(prefix.length);
+    if (!/^[0-9a-f]+$/i.test(receivedHex) || receivedHex.length % 2 !== 0) {
+        return false;
+    }
+    const expected = createHmac("sha256", args.secret).update(args.body).digest();
+    const received = Buffer.from(receivedHex, "hex");
+    return (received.length === expected.length && timingSafeEqual(received, expected));
+}
+/**
+ * GitHub webhook channel (Eve-compatible dispatch surface). Point a GitHub App
+ * or repository webhook at `/<agent>/v1/channels/github` and declare inbound
+ * hooks:
+ *
+ * ```ts
+ * import { defaultGitHubAuth, githubChannel } from "@anysphere/agent-serve/channels/github";
+ *
+ * export default githubChannel({
+ *   botName: "my-agent",
+ *   credentials: { webhookSecret: () => process.env.GITHUB_WEBHOOK_SECRET },
+ *   // Replaces the @mention gate. Prefer typed Octokit via getOctokit().
+ *   onComment: (ctx, comment) => ({ auth: defaultGitHubAuth(ctx) }),
+ *   onPullRequest: (ctx, pr) =>
+ *     pr.action === "opened" ? { auth: defaultGitHubAuth(ctx) } : null,
+ *   onStatus: (ctx, status) =>
+ *     status.state === "failure"
+ *       ? {
+ *           task: async () => {
+ *             const octokit = await ctx.github.getOctokit();
+ *             await octokit.rest.repos.createCommitStatus({
+ *               owner: ctx.repository.owner,
+ *               repo: ctx.repository.name,
+ *               sha: status.sha,
+ *               state: "pending",
+ *               context: "agent/triage",
+ *             });
+ *           },
+ *         }
+ *       : null,
+ *   onEvent: (ctx, event) =>
+ *     event.eventName === "label" ? { auth: defaultGitHubAuth(ctx) } : null,
+ * });
+ * ```
+ */
+/**
+ * Core GitHub webhook dispatch used by {@link githubChannel} routes and by
+ * {@link handleAgentServeTrigger} fan-out. Signature verification is the
+ * caller's responsibility (HTTP route verifies; internal fan-out skips).
+ */
+export function dispatchGitHubWebhook(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const { options, eventName, payload, deliveryId, args } = input;
+        const botName = (_a = options.botName) !== null && _a !== void 0 ? _a : process.env.GITHUB_APP_SLUG;
+        const bindingConfig = {
+            api: options.api,
+            credentials: options.credentials,
+        };
+        if (eventName === "ping") {
+            return Response.json({ ok: true, event: "ping" });
+        }
+        switch (eventName) {
+            case "pull_request":
+                return handlePullRequest({
+                    options,
+                    bindingConfig,
+                    payload,
+                    deliveryId,
+                    args,
+                });
+            case "issue_comment":
+                return handleIssueComment({
+                    options,
+                    bindingConfig,
+                    botName,
+                    payload,
+                    deliveryId,
+                    args,
+                });
+            case "pull_request_review_comment":
+                return handleReviewComment({
+                    options,
+                    bindingConfig,
+                    botName,
+                    payload,
+                    deliveryId,
+                    args,
+                });
+            case "issues":
+                return handleIssue({
+                    options,
+                    bindingConfig,
+                    payload,
+                    deliveryId,
+                    args,
+                });
+            case "check_suite":
+                return handleCheckSuite({
+                    options,
+                    bindingConfig,
+                    payload,
+                    deliveryId,
+                    args,
+                });
+            case "check_run":
+                return handleCheckRun({
+                    options,
+                    bindingConfig,
+                    payload,
+                    deliveryId,
+                    args,
+                });
+            case "workflow_run":
+                return handleWorkflowRun({
+                    options,
+                    bindingConfig,
+                    payload,
+                    deliveryId,
+                    args,
+                });
+            case "status":
+                return handleStatus({
+                    options,
+                    bindingConfig,
+                    payload,
+                    deliveryId,
+                    args,
+                });
+            default:
+                if (options.onEvent !== undefined && eventName !== null) {
+                    return handleGenericEvent({
+                        options,
+                        bindingConfig,
+                        eventName,
+                        payload,
+                        deliveryId,
+                        args,
+                    });
+                }
+                return Response.json({
+                    ok: true,
+                    skipped: true,
+                    reason: "unsupported_event",
+                    event: eventName,
+                });
+        }
+    });
+}
+/**
+ * HTTP entry for a single agent's GitHub channel: optional HMAC verify, then
+ * {@link dispatchGitHubWebhook}.
+ */
+export function handleGitHubWebhookRequest(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        var _b, _c;
+        const bodyText = yield input.request.text();
+        const webhookSecret = (_b = (_a = input.options.credentials) === null || _a === void 0 ? void 0 : _a.webhookSecret) !== null && _b !== void 0 ? _b : envWebhookSecret();
+        if (webhookSecret !== undefined && input.skipSignatureVerification !== true) {
+            const signatureResult = yield verifyGitHubWebhookSignature({
+                body: bodyText,
+                signatureHeader: input.request.headers.get("x-hub-signature-256"),
+                secret: webhookSecret,
+            });
+            if (signatureResult !== "verified") {
+                return Response.json({ ok: false, error: signatureResult }, { status: 401 });
+            }
+        }
+        let payload;
+        try {
+            payload = JSON.parse(bodyText);
+        }
+        catch (_d) {
+            return Response.json({ ok: false, error: "invalid_json" }, { status: 400 });
+        }
+        return dispatchGitHubWebhook({
+            options: input.options,
+            eventName: input.request.headers.get("x-github-event"),
+            payload,
+            deliveryId: (_c = input.request.headers.get("x-github-delivery")) !== null && _c !== void 0 ? _c : undefined,
+            args: input.args,
+        });
+    });
+}
+/** Options used to construct a github channel — for host-level fan-out. */
+const githubChannelOptionsByDefinition = new WeakMap();
+/**
+ * Recover the {@link GitHubChannelOptions} used to build a channel definition,
+ * if it was created via {@link githubChannel}.
+ */
+export function getGitHubChannelOptions(definition) {
+    return githubChannelOptionsByDefinition.get(definition);
+}
+export function githubChannel(options = {}) {
+    var _a;
+    var _b, _c, _d;
+    const routePath = (_b = options.path) !== null && _b !== void 0 ? _b : "/";
+    const webhookSecret = (_c = (_a = options.credentials) === null || _a === void 0 ? void 0 : _a.webhookSecret) !== null && _c !== void 0 ? _c : envWebhookSecret();
+    // With a secret the HMAC is the request auth (allowAll). Without one, prod
+    // stays loopback-strict; dev admits unsigned deliveries from a loopback peer
+    // only (loopbackGitHubDev) — not the LAN. Admits `gh webhook forward`
+    // deliveries (loopback peer + GitHub forwarding/delivery headers) while
+    // rejecting loopback tunnels that relay unsigned traffic without
+    // `X-GitHub-Event`.
+    //
+    // Evaluate `isDevMode()` per request (not at channel construction): channel
+    // modules call `githubChannel()` at import, and discovery may cache the
+    // definition across serve() calls. `serve()` sets the flag before discovery,
+    // but request-time lookup stays correct if that ordering ever drifts.
+    const auth = (_d = options.auth) !== null && _d !== void 0 ? _d : (webhookSecret !== undefined
+        ? [allowAll()]
+        : [
+            (request, info) => (isDevMode() ? loopbackGitHubDev() : localDevStrict())(request, info),
+        ]);
+    const events = Object.assign(Object.assign({}, buildDefaultGitHubEvents(Object.assign({}, options))), options.events);
+    const definition = defineChannel({
+        auth,
+        state: emptyGitHubChannelState(),
+        events,
+        meta: {
+            kind: GITHUB_CHANNEL_KIND,
+            githubWebhookEvents: deriveGitHubWebhookEvents(options),
+        },
+        onStart: options.onStart,
+        onStop: options.onStop,
+        routes: [
+            POST(routePath, {
+                // Webhook payloads vary by `X-GitHub-Event`; event-specific Zod
+                // parsing happens inside the dispatcher. Require a schema at the
+                // route boundary so /v1/info + Try always have something to show.
+                bodySchema: z.unknown(),
+                description: "GitHub webhook ingress",
+                handler: (request, args) => __awaiter(this, void 0, void 0, function* () { return handleGitHubWebhookRequest({ options, request, args }); }),
+            }),
+        ],
+    });
+    githubChannelOptionsByDefinition.set(definition, options);
+    return definition;
+}
+function handlePullRequest(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        const parsed = parseGitHubPullRequestEvent({
+            payload: input.payload,
+            deliveryId: input.deliveryId,
+        });
+        if (parsed === null) {
+            return Response.json({ ok: false, error: "invalid_pull_request_payload" }, { status: 400 });
+        }
+        const { pullRequest } = parsed;
+        const installationId = (_a = readInstallationId(input.payload)) !== null && _a !== void 0 ? _a : parsed.ctx.installationId;
+        const binding = githubBindingStateForEvent({
+            kind: parsed.ctx.conversation.kind,
+            owner: parsed.ctx.repository.owner,
+            repo: parsed.ctx.repository.name,
+            number: parsed.ctx.conversation.number,
+            repositoryId: parsed.ctx.repository.id,
+            installationId,
+        });
+        const ctx = enrichEventContext({
+            bindingConfig: input.bindingConfig,
+            ctx: parsed.ctx,
+            bindingState: binding,
+            installationId,
+            host: input.args.host,
+        });
+        const dispatch = input.options.onPullRequest === undefined
+            ? defaultGitHubPullRequestDispatch(ctx, pullRequest)
+            : yield input.options.onPullRequest(ctx, pullRequest);
+        if (dispatch === null) {
+            return skipped("not_dispatched", { action: pullRequest.action });
+        }
+        if (isTaskDispatch(dispatch)) {
+            return acknowledgeTask(input.args, dispatch, {
+                action: pullRequest.action,
+                prUrl: pullRequest.url,
+                headSha: pullRequest.headSha,
+            });
+        }
+        const message = [
+            (_b = dispatch.message) !== null && _b !== void 0 ? _b : defaultGitHubPullRequestMessage(ctx, pullRequest),
+            ...((_c = dispatch.context) !== null && _c !== void 0 ? _c : []),
+        ].join("\n");
+        const cloud = yield resolveCloudOptions(input.options.cloud, ctx, pullRequest);
+        return startTurn({
+            args: input.args,
+            ctx,
+            message,
+            dispatch,
+            cloud,
+            state: sessionStateFromBinding({
+                binding,
+                deliveryId: ctx.deliveryId,
+                eventName: ctx.eventName,
+                headSha: pullRequest.headSha,
+                baseRef: pullRequest.baseRef,
+                headRef: pullRequest.headRef,
+            }),
+        });
+    });
+}
+function handleIssueComment(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d;
+        const parsed = parseIssueCommentEvent({
+            payload: input.payload,
+            deliveryId: input.deliveryId,
+        });
+        if (parsed === null) {
+            return Response.json({ ok: false, error: "invalid_issue_comment_payload" }, { status: 400 });
+        }
+        if (parsed.action !== "created") {
+            return skipped("not_dispatched", { action: parsed.action });
+        }
+        if (isIgnoredInboundComment(parsed.comment.body, parsed.comment.author, input.botName)) {
+            return skipped("ignored_comment");
+        }
+        const installationId = (_a = readInstallationId(input.payload)) !== null && _a !== void 0 ? _a : parsed.ctx.installationId;
+        const binding = githubBindingStateForEvent({
+            kind: parsed.ctx.conversation.kind,
+            owner: parsed.ctx.repository.owner,
+            repo: parsed.ctx.repository.name,
+            number: parsed.ctx.conversation.number,
+            repositoryId: parsed.ctx.repository.id,
+            installationId,
+            triggeringCommentId: parsed.comment.id,
+        });
+        const ctx = enrichEventContext({
+            bindingConfig: input.bindingConfig,
+            ctx: parsed.ctx,
+            bindingState: binding,
+            installationId,
+            host: input.args.host,
+        });
+        const dispatch = input.options.onComment === undefined
+            ? defaultOnComment(ctx, parsed.comment, {
+                botName: input.botName,
+            })
+            : yield input.options.onComment(ctx, parsed.comment);
+        if (dispatch === null) {
+            return skipped("not_dispatched");
+        }
+        if (isTaskDispatch(dispatch)) {
+            return acknowledgeTask(input.args, dispatch, {
+                event: "issue_comment",
+                action: parsed.action,
+            });
+        }
+        const trigger = extractGitHubCommentTrigger({
+            body: parsed.comment.body,
+            botName: input.botName,
+        });
+        const message = [
+            (_c = (_b = dispatch.message) !== null && _b !== void 0 ? _b : trigger === null || trigger === void 0 ? void 0 : trigger.message) !== null && _c !== void 0 ? _c : parsed.comment.body.trim(),
+            ...((_d = dispatch.context) !== null && _d !== void 0 ? _d : []),
+        ].join("\n");
+        return startTurn({
+            args: input.args,
+            ctx,
+            message,
+            dispatch,
+            state: sessionStateFromBinding({
+                binding,
+                deliveryId: ctx.deliveryId,
+                eventName: ctx.eventName,
+            }),
+        });
+    });
+}
+function handleReviewComment(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c, _d, _e;
+        const parsed = parseReviewCommentEvent({
+            payload: input.payload,
+            deliveryId: input.deliveryId,
+        });
+        if (parsed === null) {
+            return Response.json({ ok: false, error: "invalid_review_comment_payload" }, { status: 400 });
+        }
+        if (parsed.action !== "created") {
+            return skipped("not_dispatched", { action: parsed.action });
+        }
+        if (isIgnoredInboundComment(parsed.comment.body, parsed.comment.author, input.botName)) {
+            return skipped("ignored_comment");
+        }
+        const installationId = (_a = readInstallationId(input.payload)) !== null && _a !== void 0 ? _a : parsed.ctx.installationId;
+        const binding = githubBindingStateForEvent({
+            kind: parsed.ctx.conversation.kind,
+            owner: parsed.ctx.repository.owner,
+            repo: parsed.ctx.repository.name,
+            number: parsed.ctx.conversation.number,
+            repositoryId: parsed.ctx.repository.id,
+            installationId,
+            triggeringCommentId: parsed.comment.id,
+            reviewCommentId: parsed.comment.id,
+            reviewThreadRootCommentId: (_b = parsed.comment.inReplyToId) !== null && _b !== void 0 ? _b : parsed.comment.id,
+        });
+        const ctx = enrichEventContext({
+            bindingConfig: input.bindingConfig,
+            ctx: parsed.ctx,
+            bindingState: binding,
+            installationId,
+            host: input.args.host,
+        });
+        const dispatch = input.options.onComment === undefined
+            ? defaultOnComment(ctx, parsed.comment, {
+                botName: input.botName,
+            })
+            : yield input.options.onComment(ctx, parsed.comment);
+        if (dispatch === null) {
+            return skipped("not_dispatched");
+        }
+        if (isTaskDispatch(dispatch)) {
+            return acknowledgeTask(input.args, dispatch, {
+                event: "pull_request_review_comment",
+                action: parsed.action,
+            });
+        }
+        const trigger = extractGitHubCommentTrigger({
+            body: parsed.comment.body,
+            botName: input.botName,
+        });
+        const message = [
+            (_d = (_c = dispatch.message) !== null && _c !== void 0 ? _c : trigger === null || trigger === void 0 ? void 0 : trigger.message) !== null && _d !== void 0 ? _d : parsed.comment.body.trim(),
+            ...((_e = dispatch.context) !== null && _e !== void 0 ? _e : []),
+        ].join("\n");
+        return startTurn({
+            args: input.args,
+            ctx,
+            message,
+            dispatch,
+            state: sessionStateFromBinding({
+                binding,
+                deliveryId: ctx.deliveryId,
+                eventName: ctx.eventName,
+            }),
+        });
+    });
+}
+function handleIssue(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        if (input.options.onIssue === undefined) {
+            return skipped("no_handler", { event: "issues" });
+        }
+        const parsed = parseIssueEvent({
+            payload: input.payload,
+            deliveryId: input.deliveryId,
+        });
+        if (parsed === null) {
+            return Response.json({ ok: false, error: "invalid_issues_payload" }, { status: 400 });
+        }
+        const installationId = (_a = readInstallationId(input.payload)) !== null && _a !== void 0 ? _a : parsed.ctx.installationId;
+        const binding = githubBindingStateForEvent({
+            kind: parsed.ctx.conversation.kind,
+            owner: parsed.ctx.repository.owner,
+            repo: parsed.ctx.repository.name,
+            number: parsed.ctx.conversation.number,
+            repositoryId: parsed.ctx.repository.id,
+            installationId,
+        });
+        const ctx = enrichEventContext({
+            bindingConfig: input.bindingConfig,
+            ctx: parsed.ctx,
+            bindingState: binding,
+            installationId,
+            host: input.args.host,
+        });
+        const dispatch = yield input.options.onIssue(ctx, parsed.issue);
+        if (dispatch === null) {
+            return skipped("not_dispatched", { action: parsed.issue.action });
+        }
+        if (isTaskDispatch(dispatch)) {
+            return acknowledgeTask(input.args, dispatch, {
+                event: "issues",
+                action: parsed.issue.action,
+                issueNumber: parsed.issue.number,
+            });
+        }
+        const message = [
+            (_b = dispatch.message) !== null && _b !== void 0 ? _b : `Issue ${parsed.issue.action}: #${parsed.issue.number} ${parsed.issue.title}`,
+            ...((_c = dispatch.context) !== null && _c !== void 0 ? _c : []),
+        ].join("\n");
+        return startTurn({
+            args: input.args,
+            ctx,
+            message,
+            dispatch,
+            state: sessionStateFromBinding({
+                binding,
+                deliveryId: ctx.deliveryId,
+                eventName: ctx.eventName,
+            }),
+        });
+    });
+}
+function handleCheckSuite(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        if (input.options.onCheckSuite === undefined) {
+            return skipped("no_handler", { event: "check_suite" });
+        }
+        const parsed = parseCheckSuiteEvent({
+            payload: input.payload,
+            deliveryId: input.deliveryId,
+        });
+        if (parsed === null) {
+            return Response.json({ ok: false, error: "invalid_check_suite_payload" }, { status: 400 });
+        }
+        const installationId = (_a = readInstallationId(input.payload)) !== null && _a !== void 0 ? _a : parsed.unanchoredCtx.installationId;
+        if (parsed.ctx === null) {
+            const dispatch = yield input.options.onCheckSuite(enrichCiContext({
+                bindingConfig: input.bindingConfig,
+                ctx: parsed.unanchoredCtx,
+                installationId,
+                host: input.args.host,
+            }), parsed.checkSuite);
+            if (dispatch !== null && isTaskDispatch(dispatch)) {
+                return acknowledgeTask(input.args, dispatch, {
+                    event: "check_suite",
+                    action: parsed.checkSuite.action,
+                    checkSuiteId: parsed.checkSuite.checkSuiteId,
+                });
+            }
+            return skipped("no_pull_request", { event: "check_suite" });
+        }
+        const binding = githubBindingStateForEvent({
+            kind: parsed.ctx.conversation.kind,
+            owner: parsed.ctx.repository.owner,
+            repo: parsed.ctx.repository.name,
+            number: parsed.ctx.conversation.number,
+            repositoryId: parsed.ctx.repository.id,
+            installationId,
+        });
+        const ctx = enrichEventContext({
+            bindingConfig: input.bindingConfig,
+            ctx: parsed.ctx,
+            bindingState: binding,
+            installationId,
+            host: input.args.host,
+        });
+        const dispatch = yield input.options.onCheckSuite(ctx, parsed.checkSuite);
+        if (dispatch === null) {
+            return skipped("not_dispatched", { action: parsed.checkSuite.action });
+        }
+        if (isTaskDispatch(dispatch)) {
+            return acknowledgeTask(input.args, dispatch, {
+                event: "check_suite",
+                action: parsed.checkSuite.action,
+                checkSuiteId: parsed.checkSuite.checkSuiteId,
+            });
+        }
+        const message = [
+            (_b = dispatch.message) !== null && _b !== void 0 ? _b : formatCiMessage("Check suite", parsed.checkSuite.checkSuiteId, parsed.checkSuite),
+            ...((_c = dispatch.context) !== null && _c !== void 0 ? _c : []),
+        ].join("\n");
+        return startTurn({
+            args: input.args,
+            ctx,
+            message,
+            dispatch,
+            state: sessionStateFromBinding({
+                binding,
+                deliveryId: ctx.deliveryId,
+                eventName: ctx.eventName,
+                headSha: parsed.checkSuite.headSha,
+            }),
+        });
+    });
+}
+function handleCheckRun(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        if (input.options.onCheckRun === undefined) {
+            return skipped("no_handler", { event: "check_run" });
+        }
+        const parsed = parseCheckRunEvent({
+            payload: input.payload,
+            deliveryId: input.deliveryId,
+        });
+        if (parsed === null) {
+            return Response.json({ ok: false, error: "invalid_check_run_payload" }, { status: 400 });
+        }
+        const installationId = (_a = readInstallationId(input.payload)) !== null && _a !== void 0 ? _a : parsed.unanchoredCtx.installationId;
+        if (parsed.ctx === null) {
+            const dispatch = yield input.options.onCheckRun(enrichCiContext({
+                bindingConfig: input.bindingConfig,
+                ctx: parsed.unanchoredCtx,
+                installationId,
+                host: input.args.host,
+            }), parsed.checkRun);
+            if (dispatch !== null && isTaskDispatch(dispatch)) {
+                return acknowledgeTask(input.args, dispatch, {
+                    event: "check_run",
+                    action: parsed.checkRun.action,
+                    checkRunId: parsed.checkRun.checkRunId,
+                });
+            }
+            return skipped("no_pull_request", { event: "check_run" });
+        }
+        const binding = githubBindingStateForEvent({
+            kind: parsed.ctx.conversation.kind,
+            owner: parsed.ctx.repository.owner,
+            repo: parsed.ctx.repository.name,
+            number: parsed.ctx.conversation.number,
+            repositoryId: parsed.ctx.repository.id,
+            installationId,
+        });
+        const ctx = enrichEventContext({
+            bindingConfig: input.bindingConfig,
+            ctx: parsed.ctx,
+            bindingState: binding,
+            installationId,
+            host: input.args.host,
+        });
+        const dispatch = yield input.options.onCheckRun(ctx, parsed.checkRun);
+        if (dispatch === null) {
+            return skipped("not_dispatched", { action: parsed.checkRun.action });
+        }
+        if (isTaskDispatch(dispatch)) {
+            return acknowledgeTask(input.args, dispatch, {
+                event: "check_run",
+                action: parsed.checkRun.action,
+                checkRunId: parsed.checkRun.checkRunId,
+            });
+        }
+        const message = [
+            (_b = dispatch.message) !== null && _b !== void 0 ? _b : formatCiMessage("Check run", parsed.checkRun.checkRunId, parsed.checkRun),
+            ...((_c = dispatch.context) !== null && _c !== void 0 ? _c : []),
+        ].join("\n");
+        return startTurn({
+            args: input.args,
+            ctx,
+            message,
+            dispatch,
+            state: sessionStateFromBinding({
+                binding,
+                deliveryId: ctx.deliveryId,
+                eventName: ctx.eventName,
+                headSha: parsed.checkRun.headSha,
+            }),
+        });
+    });
+}
+function handleWorkflowRun(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        if (input.options.onWorkflowRun === undefined) {
+            return skipped("no_handler", { event: "workflow_run" });
+        }
+        const parsed = parseWorkflowRunEvent({
+            payload: input.payload,
+            deliveryId: input.deliveryId,
+        });
+        if (parsed === null) {
+            return Response.json({ ok: false, error: "invalid_workflow_run_payload" }, { status: 400 });
+        }
+        const installationId = (_a = readInstallationId(input.payload)) !== null && _a !== void 0 ? _a : parsed.unanchoredCtx.installationId;
+        if (parsed.ctx === null) {
+            const dispatch = yield input.options.onWorkflowRun(enrichCiContext({
+                bindingConfig: input.bindingConfig,
+                ctx: parsed.unanchoredCtx,
+                installationId,
+                host: input.args.host,
+            }), parsed.workflowRun);
+            if (dispatch !== null && isTaskDispatch(dispatch)) {
+                return acknowledgeTask(input.args, dispatch, {
+                    event: "workflow_run",
+                    action: parsed.workflowRun.action,
+                    workflowRunId: parsed.workflowRun.workflowRunId,
+                });
+            }
+            return skipped("no_pull_request", { event: "workflow_run" });
+        }
+        const binding = githubBindingStateForEvent({
+            kind: parsed.ctx.conversation.kind,
+            owner: parsed.ctx.repository.owner,
+            repo: parsed.ctx.repository.name,
+            number: parsed.ctx.conversation.number,
+            repositoryId: parsed.ctx.repository.id,
+            installationId,
+        });
+        const ctx = enrichEventContext({
+            bindingConfig: input.bindingConfig,
+            ctx: parsed.ctx,
+            bindingState: binding,
+            installationId,
+            host: input.args.host,
+        });
+        const dispatch = yield input.options.onWorkflowRun(ctx, parsed.workflowRun);
+        if (dispatch === null) {
+            return skipped("not_dispatched", { action: parsed.workflowRun.action });
+        }
+        if (isTaskDispatch(dispatch)) {
+            return acknowledgeTask(input.args, dispatch, {
+                event: "workflow_run",
+                action: parsed.workflowRun.action,
+                workflowRunId: parsed.workflowRun.workflowRunId,
+            });
+        }
+        const message = [
+            (_b = dispatch.message) !== null && _b !== void 0 ? _b : formatCiMessage("Workflow run", parsed.workflowRun.workflowRunId, parsed.workflowRun),
+            ...((_c = dispatch.context) !== null && _c !== void 0 ? _c : []),
+        ].join("\n");
+        return startTurn({
+            args: input.args,
+            ctx,
+            message,
+            dispatch,
+            state: sessionStateFromBinding({
+                binding,
+                deliveryId: ctx.deliveryId,
+                eventName: ctx.eventName,
+                headSha: parsed.workflowRun.headSha,
+            }),
+        });
+    });
+}
+function handleStatus(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        if (input.options.onStatus === undefined) {
+            return skipped("no_handler", { event: "status" });
+        }
+        const parsed = parseStatusEvent({
+            payload: input.payload,
+            deliveryId: input.deliveryId,
+        });
+        if (parsed === null) {
+            return Response.json({ ok: false, error: "invalid_status_payload" }, { status: 400 });
+        }
+        const installationId = (_a = readInstallationId(input.payload)) !== null && _a !== void 0 ? _a : parsed.ctx.installationId;
+        const binding = githubBindingStateForEvent({
+            kind: parsed.ctx.conversation.kind,
+            owner: parsed.ctx.repository.owner,
+            repo: parsed.ctx.repository.name,
+            number: parsed.ctx.conversation.number,
+            repositoryId: parsed.ctx.repository.id,
+            installationId,
+        });
+        const ctx = enrichEventContext({
+            bindingConfig: input.bindingConfig,
+            ctx: parsed.ctx,
+            bindingState: binding,
+            installationId,
+            host: input.args.host,
+        });
+        const dispatch = yield input.options.onStatus(ctx, parsed.status);
+        if (dispatch === null) {
+            return skipped("not_dispatched", {
+                event: "status",
+                state: parsed.status.state,
+            });
+        }
+        if (isTaskDispatch(dispatch)) {
+            return acknowledgeTask(input.args, dispatch, {
+                event: "status",
+                state: parsed.status.state,
+                sha: parsed.status.sha,
+            });
+        }
+        // A turn needs a thread to anchor to; commit statuses often have no PR.
+        if (ctx.conversation.number === 0) {
+            return skipped("no_pull_request", { event: "status" });
+        }
+        const message = [
+            (_b = dispatch.message) !== null && _b !== void 0 ? _b : `Commit status ${parsed.status.state} for ${parsed.status.context} at ${parsed.status.sha}`,
+            ...((_c = dispatch.context) !== null && _c !== void 0 ? _c : []),
+        ].join("\n");
+        return startTurn({
+            args: input.args,
+            ctx,
+            message,
+            dispatch,
+            state: sessionStateFromBinding({
+                binding,
+                deliveryId: ctx.deliveryId,
+                eventName: ctx.eventName,
+                headSha: parsed.status.sha,
+            }),
+        });
+    });
+}
+function handleGenericEvent(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        if (input.options.onEvent === undefined) {
+            return skipped("no_handler", { event: input.eventName });
+        }
+        const parsed = parseGenericEvent({
+            eventName: input.eventName,
+            payload: input.payload,
+            deliveryId: input.deliveryId,
+        });
+        if (parsed === null) {
+            return skipped("unsupported_event", { event: input.eventName });
+        }
+        const installationId = (_a = readInstallationId(input.payload)) !== null && _a !== void 0 ? _a : parsed.ctx.installationId;
+        const binding = githubBindingStateForEvent({
+            kind: parsed.ctx.conversation.kind,
+            owner: parsed.ctx.repository.owner,
+            repo: parsed.ctx.repository.name,
+            number: parsed.ctx.conversation.number,
+            repositoryId: parsed.ctx.repository.id,
+            installationId,
+        });
+        const ctx = enrichEventContext({
+            bindingConfig: input.bindingConfig,
+            ctx: parsed.ctx,
+            bindingState: binding,
+            installationId,
+            host: input.args.host,
+        });
+        const dispatch = yield input.options.onEvent(ctx, parsed.event);
+        if (dispatch === null) {
+            return skipped("not_dispatched", { event: input.eventName });
+        }
+        if (isTaskDispatch(dispatch)) {
+            return acknowledgeTask(input.args, dispatch, Object.assign({ event: input.eventName }, (parsed.event.action === undefined
+                ? {}
+                : { action: parsed.event.action })));
+        }
+        if (ctx.conversation.number === 0) {
+            return skipped("no_conversation", { event: input.eventName });
+        }
+        const message = [
+            (_b = dispatch.message) !== null && _b !== void 0 ? _b : `GitHub ${input.eventName} event`,
+            ...((_c = dispatch.context) !== null && _c !== void 0 ? _c : []),
+        ].join("\n");
+        return startTurn({
+            args: input.args,
+            ctx,
+            message,
+            dispatch,
+            state: sessionStateFromBinding({
+                binding,
+                deliveryId: ctx.deliveryId,
+                eventName: ctx.eventName,
+            }),
+        });
+    });
+}
+function startTurn(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const session = yield input.args.send(input.message, Object.assign(Object.assign({ auth: input.dispatch.auth, continuationToken: githubContinuationKey(input.ctx), title: (_a = input.dispatch.title) !== null && _a !== void 0 ? _a : defaultGitHubTitle(input.ctx) }, (input.cloud === undefined ? {} : { cloud: input.cloud })), { state: input.state }));
+        return Response.json({
+            ok: true,
+            sessionId: session.id,
+            isNew: session.isNew,
+            continuationToken: session.continuationToken,
+        });
+    });
+}
+function acknowledgeTask(args, dispatch, extra) {
+    // Defer the task past the current turn so the 202 can flush before work
+    // starts (and so tests can assert scheduling without racing microtasks).
+    args.waitUntil(new Promise((resolve, reject) => {
+        setImmediate(() => {
+            Promise.resolve()
+                .then(dispatch.task)
+                .then(() => resolve(), reject);
+        });
+    }));
+    return Response.json(Object.assign({ ok: true, dispatched: true, mode: "task" }, extra), { status: 202 });
+}
+function skipped(reason, extra = {}) {
+    return Response.json(Object.assign({ ok: true, skipped: true, reason }, extra));
+}
+function formatCiMessage(label, id, event) {
+    var _a;
+    const outcome = (_a = event.conclusion) !== null && _a !== void 0 ? _a : event.status;
+    return `${label} ${event.action}: ${id}${outcome ? ` (${outcome})` : ""}`;
+}
+function isIgnoredInboundComment(body, author, botName) {
+    if (body.includes("<!-- agent-serve-github -->")) {
+        return true;
+    }
+    if (isGitHubAppBotAuthor(author, botName)) {
+        return true;
+    }
+    return false;
+}
+/** Match GitHub App bot actors (`slug` config vs `slug[bot]` login). */
+export function isGitHubAppBotAuthor(author, botName) {
+    const normalizedBot = botName === null || botName === void 0 ? void 0 : botName.trim();
+    if (normalizedBot === undefined || normalizedBot === "") {
+        return false;
+    }
+    if ((author === null || author === void 0 ? void 0 : author.type) !== "Bot") {
+        return false;
+    }
+    const login = author.login;
+    const stripBotSuffix = (value) => value.replace(/\[bot\]$/i, "").toLowerCase();
+    return (login.toLowerCase() === normalizedBot.toLowerCase() ||
+        stripBotSuffix(login) === stripBotSuffix(normalizedBot));
+}
+function parseIssueCommentEvent(args) {
+    var _a;
+    var _b;
+    const schema = z.object({
+        action: z.string().min(1),
+        repository: repositorySchema,
+        issue: z.object({
+            number: z.number().int().positive(),
+            html_url: z.string().url(),
+            pull_request: z.unknown().optional(),
+        }),
+        comment: z.object({
+            id: z.number(),
+            body: z.string(),
+            html_url: z.string().url(),
+            url: z.string().url().optional(),
+            user: z
+                .object({
+                login: z.string().optional(),
+                id: z.number().optional(),
+                type: z.string().optional(),
+            })
+                .nullable()
+                .optional(),
+        }),
+        sender: senderSchema,
+        installation: installationSchema,
+    });
+    const parsed = schema.safeParse(args.payload);
+    if (!parsed.success)
+        return null;
+    const payload = parsed.data;
+    const kind = payload.issue.pull_request === undefined ? "issue" : "pull_request";
+    const repository = toRepositoryRef(payload.repository);
+    const sender = toUser(payload.sender);
+    const author = toUser(payload.comment.user);
+    const installationId = (_a = payload.installation) === null || _a === void 0 ? void 0 : _a.id;
+    const ctx = Object.assign(Object.assign(Object.assign(Object.assign({}, (args.deliveryId === undefined ? {} : { deliveryId: args.deliveryId })), { eventName: "issue_comment", repository, conversation: {
+            kind,
+            number: payload.issue.number,
+            url: payload.issue.html_url,
+        } }), (sender === undefined ? {} : { sender, senderLogin: sender.login })), (installationId === undefined ? {} : { installationId }));
+    const comment = Object.assign({ id: payload.comment.id, body: payload.comment.body, htmlUrl: payload.comment.html_url, url: (_b = payload.comment.url) !== null && _b !== void 0 ? _b : payload.comment.html_url }, (author === undefined ? {} : { author }));
+    return { action: payload.action, ctx, comment };
+}
+function parseReviewCommentEvent(args) {
+    var _a;
+    var _b;
+    const schema = z.object({
+        action: z.string().min(1),
+        repository: repositorySchema,
+        pull_request: z.object({
+            number: z.number().int().positive(),
+            html_url: z.string().url(),
+        }),
+        comment: z.object({
+            id: z.number(),
+            body: z.string(),
+            html_url: z.string().url(),
+            url: z.string().url().optional(),
+            path: z.string().optional(),
+            line: z.number().nullable().optional(),
+            pull_request_review_id: z.number().nullable().optional(),
+            in_reply_to_id: z.number().optional(),
+            user: z
+                .object({
+                login: z.string().optional(),
+                id: z.number().optional(),
+                type: z.string().optional(),
+            })
+                .nullable()
+                .optional(),
+        }),
+        sender: senderSchema,
+        installation: installationSchema,
+    });
+    const parsed = schema.safeParse(args.payload);
+    if (!parsed.success)
+        return null;
+    const payload = parsed.data;
+    const repository = toRepositoryRef(payload.repository);
+    const sender = toUser(payload.sender);
+    const author = toUser(payload.comment.user);
+    const installationId = (_a = payload.installation) === null || _a === void 0 ? void 0 : _a.id;
+    const ctx = Object.assign(Object.assign(Object.assign(Object.assign({}, (args.deliveryId === undefined ? {} : { deliveryId: args.deliveryId })), { eventName: "pull_request_review_comment", repository, conversation: {
+            kind: "review_thread",
+            number: payload.pull_request.number,
+            url: payload.pull_request.html_url,
+        } }), (sender === undefined ? {} : { sender, senderLogin: sender.login })), (installationId === undefined ? {} : { installationId }));
+    const comment = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ id: payload.comment.id, body: payload.comment.body, htmlUrl: payload.comment.html_url, url: (_b = payload.comment.url) !== null && _b !== void 0 ? _b : payload.comment.html_url }, (author === undefined ? {} : { author })), (payload.comment.path === undefined
+        ? {}
+        : { path: payload.comment.path })), (payload.comment.line === undefined
+        ? {}
+        : { line: payload.comment.line })), (payload.comment.pull_request_review_id === undefined
+        ? {}
+        : { pullRequestReviewId: payload.comment.pull_request_review_id })), (payload.comment.in_reply_to_id === undefined
+        ? {}
+        : { inReplyToId: payload.comment.in_reply_to_id }));
+    return { action: payload.action, ctx, comment };
+}
+function parseIssueEvent(args) {
+    var _a, _b;
+    const schema = z.object({
+        action: z.string().min(1),
+        repository: repositorySchema,
+        issue: z.object({
+            number: z.number().int().positive(),
+            html_url: z.string().url(),
+            title: z.string(),
+            body: z.string().nullable().optional(),
+            user: z
+                .object({
+                login: z.string().optional(),
+            })
+                .nullable()
+                .optional(),
+        }),
+        sender: senderSchema,
+        installation: installationSchema,
+    });
+    const parsed = schema.safeParse(args.payload);
+    if (!parsed.success)
+        return null;
+    const payload = parsed.data;
+    const repository = toRepositoryRef(payload.repository);
+    const sender = toUser(payload.sender);
+    const installationId = (_a = payload.installation) === null || _a === void 0 ? void 0 : _a.id;
+    const ctx = Object.assign(Object.assign(Object.assign(Object.assign({}, (args.deliveryId === undefined ? {} : { deliveryId: args.deliveryId })), { eventName: "issues", repository, conversation: {
+            kind: "issue",
+            number: payload.issue.number,
+            url: payload.issue.html_url,
+        } }), (sender === undefined ? {} : { sender, senderLogin: sender.login })), (installationId === undefined ? {} : { installationId }));
+    const issue = Object.assign(Object.assign({ action: payload.action, number: payload.issue.number, url: payload.issue.html_url, title: payload.issue.title }, (payload.issue.body === undefined || payload.issue.body === null
+        ? {}
+        : { body: payload.issue.body })), (((_b = payload.issue.user) === null || _b === void 0 ? void 0 : _b.login) === undefined
+        ? {}
+        : { authorLogin: payload.issue.user.login }));
+    return { ctx, issue };
+}
+function parseCheckSuiteEvent(args) {
+    var _a;
+    var _b, _c;
+    const schema = z.object({
+        action: z.string().min(1),
+        repository: repositorySchema,
+        check_suite: z.object({
+            id: z.number(),
+            head_sha: z.string().min(1),
+            status: z.string().optional(),
+            conclusion: z.string().nullable().optional(),
+            app: z
+                .object({
+                slug: z.string().optional(),
+                name: z.string().optional(),
+            })
+                .nullable()
+                .optional(),
+            pull_requests: z
+                .array(z.object({
+                number: z.number(),
+                url: z.string().optional(),
+                html_url: z.string().optional(),
+            }))
+                .optional(),
+        }),
+        sender: senderSchema,
+        installation: installationSchema,
+    });
+    const parsed = schema.safeParse(args.payload);
+    if (!parsed.success)
+        return null;
+    const payload = parsed.data;
+    const repository = toRepositoryRef(payload.repository);
+    const sender = toUser(payload.sender);
+    const installationId = (_a = payload.installation) === null || _a === void 0 ? void 0 : _a.id;
+    const pullRequests = toCiPullRequests(payload.check_suite.pull_requests);
+    const checkSuite = Object.assign(Object.assign({ action: payload.action, checkSuiteId: payload.check_suite.id, headSha: payload.check_suite.head_sha }, (payload.check_suite.status === undefined
+        ? {}
+        : { status: payload.check_suite.status })), { conclusion: ((_b = payload.check_suite.conclusion) !== null && _b !== void 0 ? _b : null), app: toCiApp(payload.check_suite.app), pullRequests });
+    const unanchoredCtx = unanchoredEventContext({
+        deliveryId: args.deliveryId,
+        eventName: "check_suite",
+        repository,
+        sender,
+        installationId,
+    });
+    const first = pullRequests[0];
+    if (first === undefined) {
+        return { ctx: null, unanchoredCtx, checkSuite };
+    }
+    return {
+        ctx: Object.assign(Object.assign({}, unanchoredCtx), { conversation: {
+                kind: "pull_request",
+                number: first.number,
+                url: (_c = first.url) !== null && _c !== void 0 ? _c : `${repository.url}/pull/${first.number}`,
+            } }),
+        unanchoredCtx,
+        checkSuite,
+    };
+}
+function parseCheckRunEvent(args) {
+    var _a, _b;
+    var _c, _d;
+    const schema = z.object({
+        action: z.string().min(1),
+        repository: repositorySchema,
+        check_run: z.object({
+            id: z.number(),
+            name: z.string().optional(),
+            head_sha: z.string().min(1),
+            status: z.string().optional(),
+            conclusion: z.string().nullable().optional(),
+            html_url: z.string().optional(),
+            check_suite: z
+                .object({
+                id: z.number().optional(),
+            })
+                .optional(),
+            app: z
+                .object({
+                slug: z.string().optional(),
+                name: z.string().optional(),
+            })
+                .nullable()
+                .optional(),
+            pull_requests: z
+                .array(z.object({
+                number: z.number(),
+                url: z.string().optional(),
+                html_url: z.string().optional(),
+            }))
+                .optional(),
+        }),
+        sender: senderSchema,
+        installation: installationSchema,
+    });
+    const parsed = schema.safeParse(args.payload);
+    if (!parsed.success)
+        return null;
+    const payload = parsed.data;
+    const repository = toRepositoryRef(payload.repository);
+    const sender = toUser(payload.sender);
+    const installationId = (_a = payload.installation) === null || _a === void 0 ? void 0 : _a.id;
+    const pullRequests = toCiPullRequests(payload.check_run.pull_requests);
+    const checkRun = Object.assign(Object.assign(Object.assign(Object.assign({ action: payload.action, checkRunId: payload.check_run.id, headSha: payload.check_run.head_sha }, (payload.check_run.name === undefined
+        ? {}
+        : { name: payload.check_run.name })), (((_b = payload.check_run.check_suite) === null || _b === void 0 ? void 0 : _b.id) === undefined
+        ? {}
+        : { checkSuiteId: payload.check_run.check_suite.id })), (payload.check_run.status === undefined
+        ? {}
+        : { status: payload.check_run.status })), { conclusion: ((_c = payload.check_run.conclusion) !== null && _c !== void 0 ? _c : null), app: toCiApp(payload.check_run.app), pullRequests });
+    const unanchoredCtx = unanchoredEventContext({
+        deliveryId: args.deliveryId,
+        eventName: "check_run",
+        repository,
+        sender,
+        installationId,
+    });
+    const first = pullRequests[0];
+    if (first === undefined) {
+        return { ctx: null, unanchoredCtx, checkRun };
+    }
+    return {
+        ctx: Object.assign(Object.assign({}, unanchoredCtx), { conversation: {
+                kind: "pull_request",
+                number: first.number,
+                url: (_d = first.url) !== null && _d !== void 0 ? _d : `${repository.url}/pull/${first.number}`,
+            } }),
+        unanchoredCtx,
+        checkRun,
+    };
+}
+function parseWorkflowRunEvent(args) {
+    var _a;
+    var _b, _c;
+    const schema = z.object({
+        action: z.string().min(1),
+        repository: repositorySchema,
+        workflow_run: z.object({
+            id: z.number(),
+            name: z.string().nullable().optional(),
+            workflow_id: z.number().optional(),
+            head_sha: z.string().min(1),
+            status: z.string().optional(),
+            conclusion: z.string().nullable().optional(),
+            html_url: z.string().optional(),
+            pull_requests: z
+                .array(z.object({
+                number: z.number(),
+                url: z.string().optional(),
+                html_url: z.string().optional(),
+            }))
+                .optional(),
+        }),
+        sender: senderSchema,
+        installation: installationSchema,
+    });
+    const parsed = schema.safeParse(args.payload);
+    if (!parsed.success)
+        return null;
+    const payload = parsed.data;
+    const repository = toRepositoryRef(payload.repository);
+    const sender = toUser(payload.sender);
+    const installationId = (_a = payload.installation) === null || _a === void 0 ? void 0 : _a.id;
+    const pullRequests = toCiPullRequests(payload.workflow_run.pull_requests);
+    const workflowRun = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ action: payload.action, workflowRunId: payload.workflow_run.id, headSha: payload.workflow_run.head_sha }, (payload.workflow_run.name === undefined ||
+        payload.workflow_run.name === null
+        ? {}
+        : { name: payload.workflow_run.name })), (payload.workflow_run.workflow_id === undefined
+        ? {}
+        : { workflowId: payload.workflow_run.workflow_id })), (payload.workflow_run.html_url === undefined
+        ? {}
+        : { htmlUrl: payload.workflow_run.html_url })), (payload.workflow_run.status === undefined
+        ? {}
+        : { status: payload.workflow_run.status })), { conclusion: ((_b = payload.workflow_run.conclusion) !== null && _b !== void 0 ? _b : null), 
+        // workflow_run is GitHub Actions-only (Eve semantics).
+        app: { slug: "github-actions", name: "GitHub Actions" }, pullRequests });
+    const unanchoredCtx = unanchoredEventContext({
+        deliveryId: args.deliveryId,
+        eventName: "workflow_run",
+        repository,
+        sender,
+        installationId,
+    });
+    const first = pullRequests[0];
+    if (first === undefined) {
+        return { ctx: null, unanchoredCtx, workflowRun };
+    }
+    return {
+        ctx: Object.assign(Object.assign({}, unanchoredCtx), { conversation: {
+                kind: "pull_request",
+                number: first.number,
+                url: (_c = first.url) !== null && _c !== void 0 ? _c : `${repository.url}/pull/${first.number}`,
+            } }),
+        unanchoredCtx,
+        workflowRun,
+    };
+}
+function parseStatusEvent(args) {
+    var _a;
+    var _b, _c, _d, _e;
+    const schema = z.object({
+        state: z.string().min(1),
+        sha: z.string().min(1),
+        context: z.string().optional(),
+        description: z.string().nullable().optional(),
+        target_url: z.string().nullable().optional(),
+        name: z.string().optional(),
+        branches: z
+            .array(z.object({
+            name: z.string(),
+            commit: z.object({ sha: z.string().optional() }).optional(),
+        }))
+            .optional(),
+        commit: z
+            .object({
+            sha: z.string().optional(),
+            html_url: z.string().optional(),
+        })
+            .optional(),
+        repository: repositorySchema,
+        sender: senderSchema,
+        installation: installationSchema,
+        pull_requests: z
+            .array(z.object({
+            number: z.number(),
+            url: z.string().optional(),
+            html_url: z.string().optional(),
+        }))
+            .optional(),
+    });
+    const parsed = schema.safeParse(args.payload);
+    if (!parsed.success)
+        return null;
+    const payload = parsed.data;
+    const repository = toRepositoryRef(payload.repository);
+    const sender = toUser(payload.sender);
+    const installationId = (_a = payload.installation) === null || _a === void 0 ? void 0 : _a.id;
+    const pullRequests = toCiPullRequests(payload.pull_requests);
+    const first = pullRequests[0];
+    const status = Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign(Object.assign({ state: payload.state, context: (_b = payload.context) !== null && _b !== void 0 ? _b : "" }, (payload.description === undefined
+        ? {}
+        : { description: payload.description })), (payload.target_url === undefined
+        ? {}
+        : { targetUrl: payload.target_url })), { sha: payload.sha }), (payload.name === undefined ? {} : { name: payload.name })), { branches: ((_c = payload.branches) !== null && _c !== void 0 ? _c : []).map((branch) => (Object.assign({ name: branch.name }, (branch.commit === undefined ? {} : { commit: branch.commit })))) }), (payload.commit === undefined
+        ? {}
+        : {
+            commit: Object.assign(Object.assign({}, (payload.commit.sha === undefined
+                ? {}
+                : { sha: payload.commit.sha })), (payload.commit.html_url === undefined
+                ? {}
+                : { htmlUrl: payload.commit.html_url })),
+        })), { raw: args.payload });
+    const ctx = Object.assign(Object.assign(Object.assign(Object.assign({}, (args.deliveryId === undefined ? {} : { deliveryId: args.deliveryId })), { eventName: "status", repository, conversation: {
+            kind: "pull_request",
+            number: (_d = first === null || first === void 0 ? void 0 : first.number) !== null && _d !== void 0 ? _d : 0,
+            url: (_e = first === null || first === void 0 ? void 0 : first.url) !== null && _e !== void 0 ? _e : repository.url,
+        } }), (sender === undefined ? {} : { sender, senderLogin: sender.login })), (installationId === undefined ? {} : { installationId }));
+    return { ctx, status };
+}
+function parseGenericEvent(args) {
+    var _a, _b, _c, _d, _e, _f;
+    var _g, _h, _j, _k;
+    const schema = z.object({
+        action: z.string().optional(),
+        repository: repositorySchema.optional(),
+        sender: senderSchema,
+        installation: installationSchema,
+        issue: z
+            .object({
+            number: z.number().int().positive(),
+            html_url: z.string().url().optional(),
+            pull_request: z.unknown().optional(),
+        })
+            .optional(),
+        pull_request: z
+            .object({
+            number: z.number().int().positive(),
+            html_url: z.string().url().optional(),
+        })
+            .optional(),
+    });
+    const parsed = schema.safeParse(args.payload);
+    if (!parsed.success) {
+        return null;
+    }
+    const payload = parsed.data;
+    if (payload.repository === undefined) {
+        return null;
+    }
+    const repository = toRepositoryRef(payload.repository);
+    const sender = toUser(payload.sender);
+    const installationId = (_a = payload.installation) === null || _a === void 0 ? void 0 : _a.id;
+    const kind = ((_b = payload.issue) === null || _b === void 0 ? void 0 : _b.pull_request) !== undefined
+        ? "pull_request"
+        : payload.issue !== undefined
+            ? "issue"
+            : "pull_request";
+    const number = (_h = (_g = (_c = payload.issue) === null || _c === void 0 ? void 0 : _c.number) !== null && _g !== void 0 ? _g : (_d = payload.pull_request) === null || _d === void 0 ? void 0 : _d.number) !== null && _h !== void 0 ? _h : 0;
+    const url = (_k = (_j = (_e = payload.issue) === null || _e === void 0 ? void 0 : _e.html_url) !== null && _j !== void 0 ? _j : (_f = payload.pull_request) === null || _f === void 0 ? void 0 : _f.html_url) !== null && _k !== void 0 ? _k : repository.url;
+    const event = Object.assign(Object.assign(Object.assign({ eventName: args.eventName }, (args.deliveryId === undefined ? {} : { deliveryId: args.deliveryId })), (payload.action === undefined ? {} : { action: payload.action })), { payload: args.payload });
+    const ctx = Object.assign(Object.assign(Object.assign(Object.assign({}, (args.deliveryId === undefined ? {} : { deliveryId: args.deliveryId })), { eventName: args.eventName, repository, conversation: { kind, number, url } }), (sender === undefined ? {} : { sender, senderLogin: sender.login })), (installationId === undefined ? {} : { installationId }));
+    return { ctx, event };
+}
+function unanchoredEventContext(args) {
+    return Object.assign(Object.assign(Object.assign(Object.assign({}, (args.deliveryId === undefined ? {} : { deliveryId: args.deliveryId })), { eventName: args.eventName, repository: args.repository, conversation: {
+            kind: "pull_request",
+            number: 0,
+            url: args.repository.url,
+        } }), (args.sender === undefined
+        ? {}
+        : { sender: args.sender, senderLogin: args.sender.login })), (args.installationId === undefined
+        ? {}
+        : { installationId: args.installationId }));
+}
+function toRepositoryRef(repo) {
+    var _a;
+    var _b, _c, _d, _e;
+    const [ownerFromName, nameFromFull] = repo.full_name.split("/");
+    return Object.assign({ fullName: repo.full_name, url: repo.html_url, owner: (_c = (_b = (_a = repo.owner) === null || _a === void 0 ? void 0 : _a.login) !== null && _b !== void 0 ? _b : ownerFromName) !== null && _c !== void 0 ? _c : "", name: (_e = (_d = repo.name) !== null && _d !== void 0 ? _d : nameFromFull) !== null && _e !== void 0 ? _e : repo.full_name }, (repo.id === undefined ? {} : { id: repo.id }));
+}
+function toUser(raw) {
+    if ((raw === null || raw === void 0 ? void 0 : raw.login) === undefined || raw.login === "")
+        return undefined;
+    return Object.assign(Object.assign({ login: raw.login }, (raw.id === undefined ? {} : { id: raw.id })), (raw.type === undefined ? {} : { type: raw.type }));
+}
+function toCiPullRequests(raw) {
+    return (raw !== null && raw !== void 0 ? raw : []).map((pr) => (Object.assign({ number: pr.number }, (pr.html_url !== undefined
+        ? { url: pr.html_url }
+        : pr.url !== undefined
+            ? { url: pr.url }
+            : {}))));
+}
+function toCiApp(raw) {
+    return Object.assign(Object.assign({}, ((raw === null || raw === void 0 ? void 0 : raw.slug) === undefined ? {} : { slug: raw.slug })), ((raw === null || raw === void 0 ? void 0 : raw.name) === undefined ? {} : { name: raw.name }));
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+/**
+ * Attach the GitHub API + thread handles to a parsed context, producing the
+ * full {@link GitHubEventContext} handed to inbound hooks.
+ */
+function enrichEventContext(input) {
+    const { github, thread } = buildGitHubBinding({
+        config: input.bindingConfig,
+        state: input.bindingState,
+    });
+    return Object.assign(Object.assign(Object.assign({}, input.ctx), (input.installationId === undefined
+        ? {}
+        : { installationId: input.installationId })), { github,
+        thread, host: input.host });
+}
+/**
+ * Enrich an unanchored CI context (`conversation.number === 0`). The binding
+ * still resolves `github`, but `thread.post` throws until a PR is attached.
+ */
+function enrichCiContext(input) {
+    const binding = githubBindingStateForEvent({
+        kind: input.ctx.conversation.kind,
+        owner: input.ctx.repository.owner,
+        repo: input.ctx.repository.name,
+        number: input.ctx.conversation.number,
+        repositoryId: input.ctx.repository.id,
+        installationId: input.installationId,
+    });
+    return enrichEventContext({
+        bindingConfig: input.bindingConfig,
+        ctx: input.ctx,
+        bindingState: binding,
+        installationId: input.installationId,
+        host: input.host,
+    });
+}
+/** Build the durable per-session channel state stored with the turn. */
+function sessionStateFromBinding(input) {
+    var _a, _b, _c, _d;
+    return emptyGitHubChannelState(Object.assign(Object.assign({}, input.binding), { deliveryId: (_a = input.deliveryId) !== null && _a !== void 0 ? _a : null, eventName: input.eventName, headSha: (_b = input.headSha) !== null && _b !== void 0 ? _b : null, baseRef: (_c = input.baseRef) !== null && _c !== void 0 ? _c : null, headRef: (_d = input.headRef) !== null && _d !== void 0 ? _d : null }));
+}
+/** Read `installation.id` from a raw webhook payload when present. */
+function readInstallationId(payload) {
+    if (typeof payload !== "object" || payload === null)
+        return undefined;
+    const installation = payload
+        .installation;
+    return typeof (installation === null || installation === void 0 ? void 0 : installation.id) === "number" ? installation.id : undefined;
+}
+function envWebhookSecret() {
+    if (process.env.GITHUB_WEBHOOK_SECRET === undefined ||
+        process.env.GITHUB_WEBHOOK_SECRET === "") {
+        return undefined;
+    }
+    return () => process.env.GITHUB_WEBHOOK_SECRET;
+}
+function resolveCloudOptions(cloud, ctx, pullRequest) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (cloud === undefined || cloud === false) {
+            return undefined;
+        }
+        if (cloud === true) {
+            return {
+                repos: [
+                    {
+                        url: ctx.repository.url,
+                        prUrl: pullRequest.url,
+                        startingRef: pullRequest.headSha,
+                    },
+                ],
+            };
+        }
+        if (typeof cloud === "function") {
+            return yield cloud(ctx, pullRequest);
+        }
+        return cloud;
+    });
+}