@groundnuty/macf-core 0.2.0-rc.0

package/dist/types.js

@@ -0,0 +1,102 @@
+import { z } from 'zod';
+// --- Notify payload (POST /notify body) ---
+export const NotifyTypeSchema = z.enum([
+    'issue_routed',
+    'mention',
+    'startup_check',
+    // `ci_completion` landed with macf-actions v2.0.1 / #122 — routed
+    // by the macf-actions route-by-ci-completion job when a check_suite
+    // completes on an agent-authored PR. Prior to this variant, the job
+    // shoehorned the notification into `type: 'mention'` with
+    // `source: 'ci_completion'` as a discriminator.
+    'ci_completion',
+]);
+// Check suite conclusions reaching the receiver — match GitHub's
+// terminal check_suite states that macf-actions treats as actionable
+// (see macf-actions#6 and agent-router.yml).
+export const CheckSuiteConclusionSchema = z.enum([
+    'success', 'failure', 'timed_out', 'action_required',
+]);
+export const NotifyPayloadSchema = z.object({
+    type: NotifyTypeSchema,
+    issue_number: z.number().int().positive().optional(),
+    title: z.string().optional(),
+    source: z.string().optional(),
+    message: z.string().optional(),
+    // CI-completion variant fields (#122). All optional at the top
+    // level to preserve backward compat with producers that only send
+    // the base shape. Producers that want a type-narrowed shape for
+    // ci_completion can validate against CiCompletionPayloadSchema
+    // below before POST.
+    pr_number: z.number().int().positive().optional(),
+    pr_title: z.string().optional(),
+    pr_url: z.string().url().optional(),
+    conclusion: CheckSuiteConclusionSchema.optional(),
+    failing_check_name: z.string().nullable().optional(),
+});
+/**
+ * Narrower schema for `ci_completion` payloads (#122). Producers
+ * (notably the macf-actions route-by-ci-completion job, v2.0.1+)
+ * should construct-and-validate against this schema for type-level
+ * clarity, then send over the wire. The receiver parses against the
+ * wider `NotifyPayloadSchema` (backward-compat across variants) and
+ * narrows via the `type === 'ci_completion'` discriminator.
+ *
+ * Required fields: everything the receiver needs to render the
+ * notification WITHOUT falling back to free-form `message` parsing.
+ * `failing_check_name` is null when conclusion is 'success'; string
+ * otherwise.
+ */
+export const CiCompletionPayloadSchema = z.object({
+    type: z.literal('ci_completion'),
+    source: z.literal('ci_completion'),
+    pr_number: z.number().int().positive(),
+    pr_title: z.string(),
+    pr_url: z.string().url(),
+    conclusion: CheckSuiteConclusionSchema,
+    failing_check_name: z.string().nullable(),
+    message: z.string(),
+});
+// --- Health response (GET /health body) ---
+export const HealthResponseSchema = z.object({
+    agent: z.string(),
+    status: z.literal('online'),
+    type: z.string(),
+    uptime_seconds: z.number().int().nonnegative(),
+    current_issue: z.number().int().positive().nullable(),
+    version: z.string(),
+    last_notification: z.string().nullable(),
+});
+// --- Sign request (POST /sign body) ---
+//
+// Two-step challenge-response (DR-010, security fix per #80).
+// Step 1: `{csr, agent_name, project?}` (no challenge_done, no challenge_id).
+// Step 2: `{csr, agent_name, project?, challenge_done: true, challenge_id}`.
+//
+// Step 2 MUST include the `challenge_id` the server returned in step 1,
+// and the client MUST have written the expected value to the registry
+// using its own token. See src/certs/challenge.ts for the full protocol.
+export const SignRequestSchema = z.object({
+    csr: z.string().min(1),
+    agent_name: z.string().min(1),
+    project: z.string().optional(),
+    challenge_done: z.boolean().optional(),
+    challenge_id: z.string().uuid().optional(),
+}).refine((req) => !req.challenge_done || !!req.challenge_id, { message: 'challenge_id is required when challenge_done is true' });
+// --- Sign responses ---
+export const SignChallengeResponseSchema = z.object({
+    challenge_id: z.string(),
+    instruction: z.string(),
+});
+export const SignCertResponseSchema = z.object({
+    cert: z.string(),
+});
+// --- Notify endpoint response ---
+export const NotifyResponseSchema = z.object({
+    status: z.literal('received'),
+});
+// --- Error response ---
+export const ErrorResponseSchema = z.object({
+    error: z.string(),
+});
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6CAA6C;AAE7C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,cAAc;IACd,SAAS;IACT,eAAe;IACf,kEAAkE;IAClE,oEAAoE;IACpE,oEAAoE;IACpE,0DAA0D;IAC1D,gDAAgD;IAChD,eAAe;CAChB,CAAC,CAAC;AAIH,iEAAiE;AACjE,qEAAqE;AACrE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/C,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB;CACrD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,gBAAgB;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,+DAA+D;IAC/D,kEAAkE;IAClE,gEAAgE;IAChE,+DAA+D;IAC/D,qBAAqB;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACjD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC;AAIH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,UAAU,EAAE,0BAA0B;IACtC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAIH,6CAA6C;AAE7C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAuCH,yCAAyC;AACzC,EAAE;AACF,8DAA8D;AAC9D,8EAA8E;AAC9E,6EAA6E;AAC7E,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,yEAAyE;AAEzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC,MAAM,CACP,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,EAClD,EAAE,OAAO,EAAE,sDAAsD,EAAE,CACpE,CAAC;AAIF,yBAAyB;AAEzB,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAEH,mCAAmC;AAEnC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;CAC9B,CAAC,CAAC;AAEH,yBAAyB;AAEzB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@groundnuty/macf-core",
+  "version": "0.2.0-rc.0",
+  "description": "Shared internals consumed by the MACF CLI and channel-server packages. Not intended for direct external use — will be marked deprecated-internal on first npm publish per DR-022 Amendment A.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist/"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/groundnuty/macf.git",
+    "directory": "packages/macf-core"
+  },
+  "homepage": "https://github.com/groundnuty/macf#readme",
+  "bugs": "https://github.com/groundnuty/macf/issues",
+  "license": "MIT",
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "check": "tsc --noEmit && eslint src/ && vitest run",
+    "lint": "eslint src/",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "@opentelemetry/api": "1.9.1",
+    "@peculiar/webcrypto": "^1.5.0",
+    "@peculiar/x509": "^2.0.0",
+    "reflect-metadata": "^0.2.2",
+    "zod": "^4.0.0"
+  }
+}