@cursor/july 0.1.101 → 0.1.103

package/src/internal/managed-delivery.ts

@@ -1,125 +0,0 @@
-/**
- * Envelope-carried installation config for managed-product deliveries
- * (plan 0002 Stack H1; envelope shape from Stack B1).
- *
- * On the v2 architecture a managed product (security-reviewer, …) is many
- * single-tenant deployments: the pre-signal trigger gate matches the
- * customer's automation trigger before a workflow starts and stamps the
- * matched automation uuid + an opaque installation-config reference on the
- * attributed session envelope. The delivery activity forwards the matched
- * installation-config document to the fork **inside the webhook payload it
- * POSTs to the channel**, under {@link MANAGED_DELIVERY_PAYLOAD_KEY} — the
- * same embed-in-payload pattern the legacy deployment event stream used
- * for its source marker.
- *
- * This module is the one contract both sides share: the control-plane
- * delivery path embeds with {@link withManagedDeliveryConfig}; the agent's
- * channels detect and read with {@link parseManagedDeliveryConfig}. The
- * document mirrors the sync layer's `ManagedAutomationConfigDoc` **policy**
- * fields that "ride the delivery envelope to the fork" (posting mode,
- * managed config, trigger snapshots for the channel's staleness guard);
- * readers ignore unknown fields so a newer sync can add material without
- * breaking older forks. The automation's MCP server refs deliberately do
- * NOT ride here: they travel on the hosted-admission envelope's
- * `managedAutomation` slice (plan 0002 G2, `hosted-delivery-protocol.ts` /
- * `hosted-managed-automation.ts`) so one mechanism owns MCP attach.
- *
- * INTERNAL: first-party host plumbing shared by agents in `factory/*`,
- * consumed via relative source imports. Deliberately excluded from the
- * published `@cursor/july` npm package (see the `files` whitelist).
- */
-
-/**
- * Key inside the delivered webhook payload under which the delivery
- * activity embeds the matched installation config. Chosen to never
- * collide with a provider webhook field (GitHub and Origin payloads have
- * no `cursor*` keys).
- */
-export const MANAGED_DELIVERY_PAYLOAD_KEY = "cursorManagedDelivery" as const;
-
-/**
- * The matched installation-config document as it rides the delivery to
- * the fork. Required: the matched automation uuid (B1 attribution).
- * Everything else is optional; absent fields keep the channel's default
- * posture (post, all modules enabled, no staleness guard).
- */
-export interface ManagedDeliveryInstallationConfig {
-  /** Source managed automation uuid the pre-signal gate matched. */
-  matchedAutomationUuid: string;
-  /** Opaque `<installationId>@<resourceVersion>` config reference. */
-  installationConfigRef?: string;
-  managedType?: string;
-  name?: string;
-  /**
-   * Whether product output (PR comments, …) posts for this installation,
-   * or the run stays check/shadow-only. Channels post only on `"post"`
-   * (or when the field is absent) — any other value fails closed to
-   * shadow, so a newer mode name never posts by accident.
-   */
-  postingMode?: string;
-  managedConfig?: Record<string, unknown>;
-  /**
-   * The automation's git triggers as `GitTrigger.toJson()` snapshots.
-   * The channel re-checks the delivery against them (staleness guard:
-   * the config may have changed between admission and delivery).
-   */
-  triggerSnapshots?: unknown[];
-}
-
-function isRecord(value: unknown): value is Record<string, unknown> {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-
-function nonEmptyString(value: unknown): string | undefined {
-  if (typeof value !== "string") {
-    return undefined;
-  }
-  const trimmed = value.trim();
-  return trimmed === "" ? undefined : trimmed;
-}
-
-/**
- * Read the embedded installation config out of a delivered webhook
- * payload. Returns undefined for payloads without the key (legacy
- * deliveries, host relay, fixtures) and for documents missing the
- * required matched automation uuid — the channel then runs its legacy
- * path unchanged. Malformed optional fields are dropped, not fatal.
- */
-export function parseManagedDeliveryConfig(
-  payload: unknown
-): ManagedDeliveryInstallationConfig | undefined {
-  if (!isRecord(payload)) {
-    return undefined;
-  }
-  const doc = payload[MANAGED_DELIVERY_PAYLOAD_KEY];
-  if (!isRecord(doc)) {
-    return undefined;
-  }
-  const matchedAutomationUuid = nonEmptyString(doc.matchedAutomationUuid);
-  if (matchedAutomationUuid === undefined) {
-    return undefined;
-  }
-  return {
-    matchedAutomationUuid,
-    installationConfigRef: nonEmptyString(doc.installationConfigRef),
-    managedType: nonEmptyString(doc.managedType),
-    name: nonEmptyString(doc.name),
-    postingMode: nonEmptyString(doc.postingMode),
-    managedConfig: isRecord(doc.managedConfig) ? doc.managedConfig : undefined,
-    triggerSnapshots: Array.isArray(doc.triggerSnapshots)
-      ? doc.triggerSnapshots
-      : undefined,
-  };
-}
-
-/**
- * Embed one matched installation config into the webhook payload the
- * delivery activity POSTs to the channel. Pure; used by the control-plane
- * delivery path and by channel tests building fixture envelopes.
- */
-export function withManagedDeliveryConfig(
-  payload: Record<string, unknown>,
-  config: ManagedDeliveryInstallationConfig
-): Record<string, unknown> {
-  return { ...payload, [MANAGED_DELIVERY_PAYLOAD_KEY]: config };
-}