@geminixiang/mikan 1.0.0-beta.9 → 1.0.0-beta.91

package/dist/adapters/github/types.d.ts

@@ -1,43 +1,59 @@
-import type { ConversationEvent } from "../../adapter.js";
+import type { ConversationEvent } from "../../types.js";
+import type { Workspace } from "../../office/types.js";
+import type { GithubMessagingBot } from "./bot.js";
+import type { GithubClient } from "./client.js";
 export interface GithubEvent extends ConversationEvent {
     type: "message" | "issue";
     userName?: string;
 }
-export interface GithubBotConfig {
-    appId: string;
-    /** PEM-encoded GitHub App private key. */
-    privateKey: string;
-    installationId: string;
-    /** `owner/repo` entries to watch; empty = all installation repositories. */
+export type GithubApi = Pick<GithubClient, keyof GithubClient>;
+export type GithubConversationBot = Pick<GithubMessagingBot, "postComment" | "updateMessage" | "deleteComment" | "addReaction" | "logBotResponse" | "getMessagingInfo" | "capabilities" | "agentIdentity">;
+export type GithubTrigger = "mention" | "assign" | "review" | "followup";
+export type GithubCapability = "triage" | "push";
+export type GithubTriggerPermission = "write" | "maintain" | "admin";
+export interface GithubPolicy {
     repos: string[];
-    pollIntervalMs: number;
-    workingDir: string;
-    /**
-     * Where the poll watermark state (baseline + seen ids) is persisted. Lives
-     * under the host-only state dir: the workspace dir can be mounted into
-     * sandboxes, and sandboxed code must not be able to clear dedup state and
-     * re-trigger runs.
-     */
-    syncStatePath: string;
-}
-/** Persisted per-repo poll watermark (DESIGN.md § Event source). */
-interface GithubRepoSyncState {
-    /** Comments/issues created before this ISO instant never trigger. */
-    baseline: string;
-    /** Newest updated_at seen; polls fetch from (cursor - overlap). */
-    cursor: string;
-    seenComments: number[];
-    seenIssues: number[];
-}
-export interface GithubSyncState {
-    repos: Record<string, GithubRepoSyncState>;
+    publicRepos: boolean;
+    users: string[] | null;
+    minPermission: GithubTriggerPermission;
+    triggers: ReadonlySet<GithubTrigger>;
+    capabilities: ReadonlySet<GithubCapability>;
+}
+export interface GithubBotConfig {
+    token: string;
+    policy: GithubPolicy;
+    workspace: Workspace;
+}
+export interface GithubAgentIdentity {
+    login: string;
+    email: string;
 }
 export interface GithubRepoRef {
     owner: string;
     repo: string;
 }
-export interface GithubConversationRef extends GithubRepoRef {
+export interface GithubActivity {
+    kind: "opened" | "comment" | "review_comment" | "assigned" | "review_requested";
+    repo: GithubRepoRef & {
+        private: boolean;
+    };
     number: number;
+    sender: {
+        login: string;
+        isBot: boolean;
+    };
+    target: string | null;
+    ts: string;
+    text: string;
+    createdAt: string;
+    review?: GithubReviewAnchor;
+}
+export interface GithubReviewAnchor {
+    commentId: number;
+    path: string;
+    line: number | null;
+    diffHunk: string;
+    inReplyToId?: number;
 }
 interface GithubUser {
     login: string;
@@ -52,6 +68,13 @@ export interface GithubIssue {
     created_at: string;
     updated_at: string;
     pull_request?: object;
+    state?: string;
+    labels?: {
+        name: string;
+    }[];
+    assignees?: {
+        login: string;
+    }[];
 }
 export interface GithubIssueComment {
     id: number;
@@ -59,53 +82,173 @@ export interface GithubIssueComment {
     user: GithubUser;
     created_at: string;
     updated_at: string;
-    /** API URL of the parent issue, e.g. …/repos/o/r/issues/42 */
     issue_url: string;
 }
-export interface GithubRepository {
-    name: string;
-    owner: GithubUser;
+export interface GithubReviewComment {
+    id: number;
+    body: string;
+    user: GithubUser;
+    created_at: string;
+    updated_at: string;
+    pull_request_url: string;
+    path: string;
+    line: number | null;
+    diff_hunk: string;
+    in_reply_to_id?: number;
 }
 export interface GithubRepositoryDetails {
     default_branch: string;
 }
 export interface GithubCollaboratorPermission {
-    /** Legacy field: admin | write | read | none (maintain→write, triage→read). */
     permission: string;
-    /** Granular assigned role (admin/maintain/write/triage/read or a custom role). */
     role_name?: string;
 }
 export interface GithubPullRequest {
     number: number;
     html_url: string;
+    head?: {
+        ref: string;
+        sha: string;
+        repo?: {
+            full_name?: string;
+        } | null;
+    };
+    base?: {
+        ref: string;
+    };
+    title?: string;
+    body?: string | null;
+    state?: string;
+    draft?: boolean;
+    merged?: boolean;
+    mergeable_state?: string;
+    changed_files?: number;
+    additions?: number;
+    deletions?: number;
+    user?: GithubUser;
+}
+export interface GithubPullRequestFile {
+    filename: string;
+    status: string;
+    additions: number;
+    deletions: number;
+}
+export interface GithubPullRequestReview {
+    id: number;
+    user: GithubUser;
+    body: string | null;
+    state: string;
+    submitted_at?: string;
+}
+export interface GithubCombinedStatus {
+    sha: string;
+    statuses: {
+        id: number;
+        context: string;
+        state: string;
+        description: string | null;
+        target_url: string | null;
+    }[];
+}
+export interface GithubWorkflowRun {
+    id: number;
+    name: string | null;
+}
+export interface GithubWorkflowJob {
+    id: number;
+    name: string;
+    status: string;
+    conclusion: string | null;
+    html_url: string | null;
 }
-/** Permission subset requestable on a scoped installation token. */
-export type GithubTokenPermissions = Partial<Record<"contents" | "pull_requests" | "issues", "read" | "write">>;
 export type GithubReactionContent = "+1" | "-1" | "laugh" | "confused" | "heart" | "hooray" | "rocket" | "eyes";
-export interface CloneRepoOptions {
-    /** HTTPS remote, e.g. https://github.com/owner/repo.git (no credentials). */
-    url: string;
-    /** Destination directory (the conversation dir's `repo/`). */
-    dir: string;
-    /** Ephemeral scoped installation token; used per-invocation, never stored. */
+export interface GithubClientOptions {
     token: string;
-    botLogin: string;
-    botEmail: string;
-    /** When the conversation is a PR: fetch and checkout its head as pr-<n>. */
-    prNumber?: number;
+    baseUrl?: string;
+    fetchImpl?: typeof fetch;
 }
-export interface PushBranchOptions {
-    dir: string;
+export interface GithubPrRequest {
     branch: string;
-    token: string;
+    title: string;
+    body?: string;
+    base?: string;
+    draft?: boolean;
 }
-export interface GithubClientOptions {
-    appId: string;
-    privateKey: string;
-    installationId: string;
-    /** Override the API root for tests; defaults to https://api.github.com */
-    baseUrl?: string;
-    fetchImpl?: typeof fetch;
+export interface GithubPrResult {
+    number: number;
+    url: string;
+    updatedExisting?: boolean;
+}
+export interface GithubCheckSummary {
+    id: number;
+    name: string;
+    status: string;
+    conclusion: string | null;
+    url: string | null;
+    source: "actions" | "status";
+    outputSummary: string | null;
+}
+export interface GithubChecksFns {
+    getChecks: (branch?: string) => Promise<GithubCheckSummary[]>;
+    getJobLog: (jobId: number) => Promise<string>;
+}
+export interface GithubReadRequest {
+    action: "pr" | "pr_files" | "pr_reviews" | "issue" | "comments" | "list";
+    number?: number;
+    state?: string;
+    labels?: string;
+    creator?: string;
+}
+export type GithubReadResult = {
+    kind: "pr";
+    pr: GithubPullRequest;
+} | {
+    kind: "pr_files";
+    files: GithubPullRequestFile[];
+} | {
+    kind: "pr_reviews";
+    reviews: GithubPullRequestReview[];
+    threads: GithubReviewComment[];
+} | {
+    kind: "issue";
+    issue: GithubIssue;
+} | {
+    kind: "comments";
+    comments: GithubIssueComment[];
+} | {
+    kind: "list";
+    issues: GithubIssue[];
+};
+export interface GithubIssueRequest {
+    action: "add_labels" | "remove_label" | "add_assignees" | "remove_assignees" | "close" | "reopen";
+    number?: number;
+    labels?: string[];
+    label?: string;
+    assignees?: string[];
+    state_reason?: "completed" | "not_planned";
+}
+export type GithubReviewReplyFn = (commentId: number, body: string) => Promise<{
+    url: string;
+}>;
+export type GithubReadFn = (request: GithubReadRequest) => Promise<GithubReadResult>;
+export type GithubIssueFn = (request: GithubIssueRequest) => Promise<string>;
+export interface PlatformGithubOps {
+    createPullRequest(conversationId: string, request: GithubPrRequest): Promise<GithubPrResult>;
+    getChecks(conversationId: string, branch?: string): Promise<GithubCheckSummary[]>;
+    getJobLog(conversationId: string, jobId: number): Promise<string>;
+    replyToReviewThread(conversationId: string, commentId: number, body: string): Promise<{
+        url: string;
+    }>;
+    readGithub(conversationId: string, request: GithubReadRequest): Promise<GithubReadResult>;
+    manageIssue(conversationId: string, request: GithubIssueRequest): Promise<string>;
+}
+export interface GithubWebhookDelivery {
+    event: string;
+    payload: unknown;
+}
+export interface GithubWebhookOptions {
+    secret: string;
+    onDelivery: (delivery: GithubWebhookDelivery) => void;
 }
 export {};
 //# sourceMappingURL=types.d.ts.map

package/dist/adapters/github/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,WAAW,WAAY,SAAQ,iBAAiB;IACpD,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,4EAA4E;IAC5E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,oEAAoE;AACpE,UAAU,mBAAmB;IAC3B,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAsB,SAAQ,aAAa;IAC1D,MAAM,EAAE,MAAM,CAAC;CAChB;AAID,UAAU,UAAU;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,4BAA4B;IAC3C,+EAA+E;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,oEAAoE;AACpE,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAC1C,MAAM,CAAC,UAAU,GAAG,eAAe,GAAG,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,CAClE,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAC7B,IAAI,GACJ,IAAI,GACJ,OAAO,GACP,UAAU,GACV,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,CAAC;AAEX,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ,8DAA8D;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,WAAY,SAAQ,iBAAiB;IACpD,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,YAAY,CAAC,CAAC;AAE/D,MAAM,MAAM,qBAAqB,GAAG,IAAI,CACtC,kBAAkB,EAChB,aAAa,GACb,eAAe,GACf,eAAe,GACf,aAAa,GACb,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,eAAe,CAClB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEzE,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEjD,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,UAAU,GAAG,OAAO,CAAC;AAErE,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACvB,aAAa,EAAE,uBAAuB,CAAC;IACvC,QAAQ,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;IACrC,YAAY,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,gBAAgB,GAAG,UAAU,GAAG,kBAAkB,CAAC;IAChF,IAAI,EAAE,aAAa,GAAG;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1C,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,UAAU;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE;YAAE,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAA;KAAE,CAAC;IAC1E,IAAI,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,EAAE,CAAC;CACL;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,MAAM,qBAAqB,GAC7B,IAAI,GACJ,IAAI,GACJ,OAAO,GACP,UAAU,GACV,OAAO,GACP,QAAQ,GACR,QAAQ,GACR,MAAM,CAAC;AAEX,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC9D,SAAS,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,IAAI,GAAG,UAAU,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,EAAE,EAAE,iBAAiB,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,qBAAqB,EAAE,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,uBAAuB,EAAE,CAAC;IAAC,OAAO,EAAE,mBAAmB,EAAE,CAAA;CAAE,GAC1F;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CAAC;AAE5C,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,YAAY,GAAG,cAAc,GAAG,eAAe,GAAG,kBAAkB,GAAG,OAAO,GAAG,QAAQ,CAAC;IAClG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC;CAC5C;AAED,MAAM,MAAM,mBAAmB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEhG,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAErF,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,kBAAkB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE7E,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7F,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAClF,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,mBAAmB,CACjB,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5B,UAAU,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC1F,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnF;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,IAAI,CAAC;CACvD"}

package/dist/adapters/github/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/adapters/github/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ConversationEvent } from \"../../adapter.js\";\n\nexport interface GithubEvent extends ConversationEvent {\n  type: \"message\" | \"issue\";\n  userName?: string;\n}\n\nexport interface GithubBotConfig {\n  appId: string;\n  /** PEM-encoded GitHub App private key. */\n  privateKey: string;\n  installationId: string;\n  /** `owner/repo` entries to watch; empty = all installation repositories. */\n  repos: string[];\n  pollIntervalMs: number;\n  workingDir: string;\n  /**\n   * Where the poll watermark state (baseline + seen ids) is persisted. Lives\n   * under the host-only state dir: the workspace dir can be mounted into\n   * sandboxes, and sandboxed code must not be able to clear dedup state and\n   * re-trigger runs.\n   */\n  syncStatePath: string;\n}\n\n/** Persisted per-repo poll watermark (DESIGN.md § Event source). */\ninterface GithubRepoSyncState {\n  /** Comments/issues created before this ISO instant never trigger. */\n  baseline: string;\n  /** Newest updated_at seen; polls fetch from (cursor - overlap). */\n  cursor: string;\n  seenComments: number[];\n  seenIssues: number[];\n}\n\nexport interface GithubSyncState {\n  repos: Record<string, GithubRepoSyncState>;\n}\n\nexport interface GithubRepoRef {\n  owner: string;\n  repo: string;\n}\n\nexport interface GithubConversationRef extends GithubRepoRef {\n  number: number;\n}\n\n// ── GitHub REST payload shapes (only the fields mikan reads) ─────────────────\n\ninterface GithubUser {\n  login: string;\n  type: string;\n}\n\nexport interface GithubIssue {\n  id: number;\n  number: number;\n  title: string;\n  body: string | null;\n  user: GithubUser;\n  created_at: string;\n  updated_at: string;\n  pull_request?: object;\n}\n\nexport interface GithubIssueComment {\n  id: number;\n  body: string;\n  user: GithubUser;\n  created_at: string;\n  updated_at: string;\n  /** API URL of the parent issue, e.g. …/repos/o/r/issues/42 */\n  issue_url: string;\n}\n\nexport interface GithubRepository {\n  name: string;\n  owner: GithubUser;\n}\n\nexport interface GithubRepositoryDetails {\n  default_branch: string;\n}\n\nexport interface GithubCollaboratorPermission {\n  /** Legacy field: admin | write | read | none (maintain→write, triage→read). */\n  permission: string;\n  /** Granular assigned role (admin/maintain/write/triage/read or a custom role). */\n  role_name?: string;\n}\n\nexport interface GithubPullRequest {\n  number: number;\n  html_url: string;\n}\n\n/** Permission subset requestable on a scoped installation token. */\nexport type GithubTokenPermissions = Partial<\n  Record<\"contents\" | \"pull_requests\" | \"issues\", \"read\" | \"write\">\n>;\n\nexport type GithubReactionContent =\n  | \"+1\"\n  | \"-1\"\n  | \"laugh\"\n  | \"confused\"\n  | \"heart\"\n  | \"hooray\"\n  | \"rocket\"\n  | \"eyes\";\n\nexport interface CloneRepoOptions {\n  /** HTTPS remote, e.g. https://github.com/owner/repo.git (no credentials). */\n  url: string;\n  /** Destination directory (the conversation dir's `repo/`). */\n  dir: string;\n  /** Ephemeral scoped installation token; used per-invocation, never stored. */\n  token: string;\n  botLogin: string;\n  botEmail: string;\n  /** When the conversation is a PR: fetch and checkout its head as pr-<n>. */\n  prNumber?: number;\n}\n\nexport interface PushBranchOptions {\n  dir: string;\n  branch: string;\n  token: string;\n}\n\nexport interface GithubClientOptions {\n  appId: string;\n  privateKey: string;\n  installationId: string;\n  /** Override the API root for tests; defaults to https://api.github.com */\n  baseUrl?: string;\n  fetchImpl?: typeof fetch;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/adapters/github/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ConversationEvent } from \"../../types.js\";\nimport type { Workspace } from \"../../office/types.js\";\nimport type { GithubMessagingBot } from \"./bot.js\";\nimport type { GithubClient } from \"./client.js\";\n\nexport interface GithubEvent extends ConversationEvent {\n  type: \"message\" | \"issue\";\n  userName?: string;\n}\n\nexport type GithubApi = Pick<GithubClient, keyof GithubClient>;\n\nexport type GithubConversationBot = Pick<\n  GithubMessagingBot,\n  | \"postComment\"\n  | \"updateMessage\"\n  | \"deleteComment\"\n  | \"addReaction\"\n  | \"logBotResponse\"\n  | \"getMessagingInfo\"\n  | \"capabilities\"\n  | \"agentIdentity\"\n>;\n\nexport type GithubTrigger = \"mention\" | \"assign\" | \"review\" | \"followup\";\n\nexport type GithubCapability = \"triage\" | \"push\";\n\nexport type GithubTriggerPermission = \"write\" | \"maintain\" | \"admin\";\n\nexport interface GithubPolicy {\n  repos: string[];\n  publicRepos: boolean;\n  users: string[] | null;\n  minPermission: GithubTriggerPermission;\n  triggers: ReadonlySet<GithubTrigger>;\n  capabilities: ReadonlySet<GithubCapability>;\n}\n\nexport interface GithubBotConfig {\n  token: string;\n  policy: GithubPolicy;\n  workspace: Workspace;\n}\n\nexport interface GithubAgentIdentity {\n  login: string;\n  email: string;\n}\n\nexport interface GithubRepoRef {\n  owner: string;\n  repo: string;\n}\n\nexport interface GithubActivity {\n  kind: \"opened\" | \"comment\" | \"review_comment\" | \"assigned\" | \"review_requested\";\n  repo: GithubRepoRef & { private: boolean };\n  number: number;\n  sender: { login: string; isBot: boolean };\n  target: string | null;\n  ts: string;\n  text: string;\n  createdAt: string;\n  review?: GithubReviewAnchor;\n}\n\nexport interface GithubReviewAnchor {\n  commentId: number;\n  path: string;\n  line: number | null;\n  diffHunk: string;\n  inReplyToId?: number;\n}\n\ninterface GithubUser {\n  login: string;\n  type: string;\n}\n\nexport interface GithubIssue {\n  id: number;\n  number: number;\n  title: string;\n  body: string | null;\n  user: GithubUser;\n  created_at: string;\n  updated_at: string;\n  pull_request?: object;\n  state?: string;\n  labels?: { name: string }[];\n  assignees?: { login: string }[];\n}\n\nexport interface GithubIssueComment {\n  id: number;\n  body: string;\n  user: GithubUser;\n  created_at: string;\n  updated_at: string;\n  issue_url: string;\n}\n\nexport interface GithubReviewComment {\n  id: number;\n  body: string;\n  user: GithubUser;\n  created_at: string;\n  updated_at: string;\n  pull_request_url: string;\n  path: string;\n  line: number | null;\n  diff_hunk: string;\n  in_reply_to_id?: number;\n}\n\nexport interface GithubRepositoryDetails {\n  default_branch: string;\n}\n\nexport interface GithubCollaboratorPermission {\n  permission: string;\n  role_name?: string;\n}\n\nexport interface GithubPullRequest {\n  number: number;\n  html_url: string;\n  head?: { ref: string; sha: string; repo?: { full_name?: string } | null };\n  base?: { ref: string };\n  title?: string;\n  body?: string | null;\n  state?: string;\n  draft?: boolean;\n  merged?: boolean;\n  mergeable_state?: string;\n  changed_files?: number;\n  additions?: number;\n  deletions?: number;\n  user?: GithubUser;\n}\n\nexport interface GithubPullRequestFile {\n  filename: string;\n  status: string;\n  additions: number;\n  deletions: number;\n}\n\nexport interface GithubPullRequestReview {\n  id: number;\n  user: GithubUser;\n  body: string | null;\n  state: string;\n  submitted_at?: string;\n}\n\nexport interface GithubCombinedStatus {\n  sha: string;\n  statuses: {\n    id: number;\n    context: string;\n    state: string;\n    description: string | null;\n    target_url: string | null;\n  }[];\n}\n\nexport interface GithubWorkflowRun {\n  id: number;\n  name: string | null;\n}\n\nexport interface GithubWorkflowJob {\n  id: number;\n  name: string;\n  status: string;\n  conclusion: string | null;\n  html_url: string | null;\n}\n\nexport type GithubReactionContent =\n  | \"+1\"\n  | \"-1\"\n  | \"laugh\"\n  | \"confused\"\n  | \"heart\"\n  | \"hooray\"\n  | \"rocket\"\n  | \"eyes\";\n\nexport interface GithubClientOptions {\n  token: string;\n  baseUrl?: string;\n  fetchImpl?: typeof fetch;\n}\n\nexport interface GithubPrRequest {\n  branch: string;\n  title: string;\n  body?: string;\n  base?: string;\n  draft?: boolean;\n}\n\nexport interface GithubPrResult {\n  number: number;\n  url: string;\n  updatedExisting?: boolean;\n}\n\nexport interface GithubCheckSummary {\n  id: number;\n  name: string;\n  status: string;\n  conclusion: string | null;\n  url: string | null;\n  source: \"actions\" | \"status\";\n  outputSummary: string | null;\n}\n\nexport interface GithubChecksFns {\n  getChecks: (branch?: string) => Promise<GithubCheckSummary[]>;\n  getJobLog: (jobId: number) => Promise<string>;\n}\n\nexport interface GithubReadRequest {\n  action: \"pr\" | \"pr_files\" | \"pr_reviews\" | \"issue\" | \"comments\" | \"list\";\n  number?: number;\n  state?: string;\n  labels?: string;\n  creator?: string;\n}\n\nexport type GithubReadResult =\n  | { kind: \"pr\"; pr: GithubPullRequest }\n  | { kind: \"pr_files\"; files: GithubPullRequestFile[] }\n  | { kind: \"pr_reviews\"; reviews: GithubPullRequestReview[]; threads: GithubReviewComment[] }\n  | { kind: \"issue\"; issue: GithubIssue }\n  | { kind: \"comments\"; comments: GithubIssueComment[] }\n  | { kind: \"list\"; issues: GithubIssue[] };\n\nexport interface GithubIssueRequest {\n  action: \"add_labels\" | \"remove_label\" | \"add_assignees\" | \"remove_assignees\" | \"close\" | \"reopen\";\n  number?: number;\n  labels?: string[];\n  label?: string;\n  assignees?: string[];\n  state_reason?: \"completed\" | \"not_planned\";\n}\n\nexport type GithubReviewReplyFn = (commentId: number, body: string) => Promise<{ url: string }>;\n\nexport type GithubReadFn = (request: GithubReadRequest) => Promise<GithubReadResult>;\n\nexport type GithubIssueFn = (request: GithubIssueRequest) => Promise<string>;\n\nexport interface PlatformGithubOps {\n  createPullRequest(conversationId: string, request: GithubPrRequest): Promise<GithubPrResult>;\n  getChecks(conversationId: string, branch?: string): Promise<GithubCheckSummary[]>;\n  getJobLog(conversationId: string, jobId: number): Promise<string>;\n  replyToReviewThread(\n    conversationId: string,\n    commentId: number,\n    body: string,\n  ): Promise<{ url: string }>;\n  readGithub(conversationId: string, request: GithubReadRequest): Promise<GithubReadResult>;\n  manageIssue(conversationId: string, request: GithubIssueRequest): Promise<string>;\n}\n\nexport interface GithubWebhookDelivery {\n  event: string;\n  payload: unknown;\n}\n\nexport interface GithubWebhookOptions {\n  secret: string;\n  onDelivery: (delivery: GithubWebhookDelivery) => void;\n}\n"]}

package/dist/adapters/github/webhook.d.ts

@@ -0,0 +1,7 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { GithubWebhookOptions } from "./types.js";
+export declare const GITHUB_WEBHOOK_PATH = "/github/webhook";
+export declare function verifyWebhookSignature(secret: string, body: Buffer, signatureHeader: string | undefined): boolean;
+export type GithubWebhookHandler = (req: IncomingMessage, res: ServerResponse, url: URL) => Promise<boolean>;
+export declare function createGithubWebhookHandler(options: GithubWebhookOptions): GithubWebhookHandler;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/adapters/github/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/webhook.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAqDrD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,eAAe,EAAE,MAAM,GAAG,SAAS,GAClC,OAAO,CAMT;AAED,MAAM,MAAM,oBAAoB,GAAG,CACjC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,KACL,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,oBAAoB,GAAG,oBAAoB,CAG9F"}

package/dist/adapters/github/webhook.js

@@ -0,0 +1,104 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+import * as log from "../../log.js";
+export const GITHUB_WEBHOOK_PATH = "/github/webhook";
+const ACTIVITY_EVENTS = new Set([
+    "issues",
+    "issue_comment",
+    "pull_request",
+    "pull_request_review_comment",
+]);
+const MAX_REMEMBERED_DELIVERIES = 1000;
+class GithubDeliveryLog {
+    constructor() {
+        this.seen = new Set();
+    }
+    firstSighting(guid) {
+        if (this.seen.has(guid))
+            return false;
+        this.seen.add(guid);
+        if (this.seen.size > MAX_REMEMBERED_DELIVERIES) {
+            const oldest = this.seen.values().next().value;
+            if (oldest !== undefined)
+                this.seen.delete(oldest);
+        }
+        return true;
+    }
+}
+function parsePayload(body) {
+    try {
+        return JSON.parse(body.toString("utf-8"));
+    }
+    catch {
+        return undefined;
+    }
+}
+const MAX_BODY_BYTES = 1024 * 1024;
+function readBody(req, maxBytes) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        req.on("data", (chunk) => {
+            size += chunk.length;
+            if (size > maxBytes) {
+                resolve(null);
+                req.destroy();
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on("end", () => resolve(Buffer.concat(chunks)));
+        req.on("error", reject);
+    });
+}
+export function verifyWebhookSignature(secret, body, signatureHeader) {
+    if (!signatureHeader?.startsWith("sha256="))
+        return false;
+    const expected = createHmac("sha256", secret).update(body).digest("hex");
+    const received = signatureHeader.slice("sha256=".length);
+    if (received.length !== expected.length)
+        return false;
+    return timingSafeEqual(Buffer.from(received, "utf-8"), Buffer.from(expected, "utf-8"));
+}
+export function createGithubWebhookHandler(options) {
+    const deliveries = new GithubDeliveryLog();
+    return (req, res, url) => handleGithubWebhookRequest(req, res, url, options, deliveries);
+}
+async function handleGithubWebhookRequest(req, res, url, options, deliveries) {
+    if (url.pathname !== GITHUB_WEBHOOK_PATH)
+        return false;
+    if (req.method !== "POST") {
+        res.writeHead(405).end();
+        return true;
+    }
+    const body = await readBody(req, MAX_BODY_BYTES);
+    if (body === null) {
+        res.writeHead(413).end();
+        return true;
+    }
+    const signature = req.headers["x-hub-signature-256"];
+    if (!verifyWebhookSignature(options.secret, body, typeof signature === "string" ? signature : undefined)) {
+        log.logWarning("GitHub webhook: rejected delivery with bad or missing signature");
+        res.writeHead(401).end();
+        return true;
+    }
+    const event = req.headers["x-github-event"];
+    if (event === "ping") {
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ ok: true }));
+        return true;
+    }
+    res.writeHead(202).end();
+    if (typeof event !== "string" || !ACTIVITY_EVENTS.has(event))
+        return true;
+    const guid = req.headers["x-github-delivery"];
+    if (typeof guid === "string" && !deliveries.firstSighting(guid))
+        return true;
+    const payload = parsePayload(body);
+    if (payload === undefined) {
+        log.logWarning(`GitHub webhook: ignoring ${event} delivery with a malformed body`);
+        return true;
+    }
+    options.onDelivery({ event, payload });
+    return true;
+}
+//# sourceMappingURL=webhook.js.map

package/dist/adapters/github/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../../src/adapters/github/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AAGpC,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAErD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,QAAQ;IACR,eAAe;IACf,cAAc;IACd,6BAA6B;CAC9B,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC,MAAM,iBAAiB;IAAvB;QACmB,SAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAW5C,CAAC;IATC,aAAa,CAAC,IAAY;QACxB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,yBAAyB,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC/C,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnC,SAAS,QAAQ,CAAC,GAAoB,EAAE,QAAgB;IACtD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,CAAC;gBACd,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpD,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,IAAY,EACZ,eAAmC;IAEnC,IAAI,CAAC,eAAe,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AACzF,CAAC;AAQD,MAAM,UAAU,0BAA0B,CAAC,OAA6B;IACtE,MAAM,UAAU,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC3C,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,GAAoB,EACpB,GAAmB,EACnB,GAAQ,EACR,OAA6B,EAC7B,UAA6B;IAE7B,IAAI,GAAG,CAAC,QAAQ,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrD,IACE,CAAC,sBAAsB,CACrB,OAAO,CAAC,MAAM,EACd,IAAI,EACJ,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CACtD,EACD,CAAC;QACD,GAAG,CAAC,UAAU,CAAC,iEAAiE,CAAC,CAAC;QAClF,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,GAAG,CAAC,UAAU,CAAC,4BAA4B,KAAK,iCAAiC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport type { IncomingMessage, ServerResponse } from \"node:http\";\nimport * as log from \"../../log.js\";\nimport type { GithubWebhookOptions } from \"./types.js\";\n\nexport const GITHUB_WEBHOOK_PATH = \"/github/webhook\";\n\nconst ACTIVITY_EVENTS = new Set([\n  \"issues\",\n  \"issue_comment\",\n  \"pull_request\",\n  \"pull_request_review_comment\",\n]);\n\nconst MAX_REMEMBERED_DELIVERIES = 1000;\n\nclass GithubDeliveryLog {\n  private readonly seen = new Set<string>();\n\n  firstSighting(guid: string): boolean {\n    if (this.seen.has(guid)) return false;\n    this.seen.add(guid);\n    if (this.seen.size > MAX_REMEMBERED_DELIVERIES) {\n      const oldest = this.seen.values().next().value;\n      if (oldest !== undefined) this.seen.delete(oldest);\n    }\n    return true;\n  }\n}\n\nfunction parsePayload(body: Buffer): unknown {\n  try {\n    return JSON.parse(body.toString(\"utf-8\"));\n  } catch {\n    return undefined;\n  }\n}\n\nconst MAX_BODY_BYTES = 1024 * 1024;\n\nfunction readBody(req: IncomingMessage, maxBytes: number): Promise<Buffer | null> {\n  return new Promise((resolve, reject) => {\n    const chunks: Buffer[] = [];\n    let size = 0;\n    req.on(\"data\", (chunk: Buffer) => {\n      size += chunk.length;\n      if (size > maxBytes) {\n        resolve(null);\n        req.destroy();\n        return;\n      }\n      chunks.push(chunk);\n    });\n    req.on(\"end\", () => resolve(Buffer.concat(chunks)));\n    req.on(\"error\", reject);\n  });\n}\n\nexport function verifyWebhookSignature(\n  secret: string,\n  body: Buffer,\n  signatureHeader: string | undefined,\n): boolean {\n  if (!signatureHeader?.startsWith(\"sha256=\")) return false;\n  const expected = createHmac(\"sha256\", secret).update(body).digest(\"hex\");\n  const received = signatureHeader.slice(\"sha256=\".length);\n  if (received.length !== expected.length) return false;\n  return timingSafeEqual(Buffer.from(received, \"utf-8\"), Buffer.from(expected, \"utf-8\"));\n}\n\nexport type GithubWebhookHandler = (\n  req: IncomingMessage,\n  res: ServerResponse,\n  url: URL,\n) => Promise<boolean>;\n\nexport function createGithubWebhookHandler(options: GithubWebhookOptions): GithubWebhookHandler {\n  const deliveries = new GithubDeliveryLog();\n  return (req, res, url) => handleGithubWebhookRequest(req, res, url, options, deliveries);\n}\n\nasync function handleGithubWebhookRequest(\n  req: IncomingMessage,\n  res: ServerResponse,\n  url: URL,\n  options: GithubWebhookOptions,\n  deliveries: GithubDeliveryLog,\n): Promise<boolean> {\n  if (url.pathname !== GITHUB_WEBHOOK_PATH) return false;\n  if (req.method !== \"POST\") {\n    res.writeHead(405).end();\n    return true;\n  }\n  const body = await readBody(req, MAX_BODY_BYTES);\n  if (body === null) {\n    res.writeHead(413).end();\n    return true;\n  }\n  const signature = req.headers[\"x-hub-signature-256\"];\n  if (\n    !verifyWebhookSignature(\n      options.secret,\n      body,\n      typeof signature === \"string\" ? signature : undefined,\n    )\n  ) {\n    log.logWarning(\"GitHub webhook: rejected delivery with bad or missing signature\");\n    res.writeHead(401).end();\n    return true;\n  }\n\n  const event = req.headers[\"x-github-event\"];\n  if (event === \"ping\") {\n    res.writeHead(200, { \"Content-Type\": \"application/json\" });\n    res.end(JSON.stringify({ ok: true }));\n    return true;\n  }\n  res.writeHead(202).end();\n  if (typeof event !== \"string\" || !ACTIVITY_EVENTS.has(event)) return true;\n  const guid = req.headers[\"x-github-delivery\"];\n  if (typeof guid === \"string\" && !deliveries.firstSighting(guid)) return true;\n  const payload = parsePayload(body);\n  if (payload === undefined) {\n    log.logWarning(`GitHub webhook: ignoring ${event} delivery with a malformed body`);\n    return true;\n  }\n  options.onDelivery({ event, payload });\n  return true;\n}\n"]}

package/dist/adapters/intake.d.ts

@@ -1,11 +1,5 @@
-import type { ConversationEvent } from "../adapter.js";
-import type { MessageIntakeOptions } from "./types.js";
-/**
- * Shared message ingress pipeline for platform adapters.
- *
- * Platform adapters still normalize SDK events and handle platform-specific stop
- * semantics. This module owns the common trigger/log/attachment/queue/handler
- * ordering for messages that may start an agent run.
- */
-export declare function processMessageIntake<TEvent extends ConversationEvent>(options: MessageIntakeOptions<TEvent>): Promise<void>;
+import type { ConversationEvent } from "../types.js";
+import type { MessageIntakeOptions, MessageIntakeOutcome } from "./types.js";
+export declare function matchMagicWord(text: string): "stop" | null;
+export declare function processMessageIntake<TEvent extends ConversationEvent>(options: MessageIntakeOptions<TEvent>): Promise<MessageIntakeOutcome>;
 //# sourceMappingURL=intake.d.ts.map

package/dist/adapters/intake.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"intake.d.ts","sourceRoot":"","sources":["../../src/adapters/intake.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,SAAS,iBAAiB,EACzE,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAqCf"}
+{"version":3,"file":"intake.d.ts","sourceRoot":"","sources":["../../src/adapters/intake.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAKrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAI7E,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE1D;AAED,wBAAsB,oBAAoB,CAAC,MAAM,SAAS,iBAAiB,EACzE,OAAO,EAAE,oBAAoB,CAAC,MAAM,CAAC,GACpC,OAAO,CAAC,oBAAoB,CAAC,CAsD/B"}