@nanobpm/nano-workforce 0.36.0 → 0.38.0

package/actions/blackboard.ts

@@ -1,77 +0,0 @@
-// GET/POST /hooks/blackboard?token=<capabilityToken> — the epic coordination blackboard endpoint
-// (Tier 1, issues #51 / #49 D4).
-//
-// This is a DIRECT side-channel for agents, distinct from the c8ctl-nano activation/completion
-// channel. The per-plan capability token (query string) IS the credential: it scopes every read
-// and write to exactly one plan, so no shared secret is needed — the agent curls the exact URL it
-// was handed in its prompt. An unknown token is a 404 (never leaks which plans exist).
-//
-//   GET  → { planKey, entries: [ { id, author_task, kind, files, body, wave, created_at } ], cursor }
-//          optional ?since=<id> returns only entries with id > since (incremental poll). `cursor` is
-//          the plan's current head id; pass it back as `since` on the next poll (Tier 2).
-//   POST → append one entry: { author_task?, kind?, files?, body, wave?, dedupe_key? }. Idempotent
-//          on (plan, dedupe_key). Returns { id, inserted, conflicts } — `conflicts` lists prior
-//          sibling `file-claim`s on the same file(s) (advisory first-writer-wins; never a lock).
-import type { ActionHandler } from "@nanobpm/urban";
-import {
-  appendEntry,
-  detectFileClaimConflicts,
-  normalizeKind,
-  planKeyForToken,
-  readBlackboardPage,
-} from "../app/blackboard.ts";
-
-const handler: ActionHandler = async ({ req, body }, app) => {
-  const token = (req.query.get("token") ?? req.headers.get("x-blackboard-token") ?? "").trim();
-  if (!token) return { status: 400, body: { error: "missing blackboard token" } };
-  const planKey = await planKeyForToken(app.data, token);
-  if (!planKey) return { status: 404, body: { error: "unknown blackboard token" } };
-
-  if (req.method === "GET") {
-    const rawSince = req.query.get("since");
-    const since = rawSince != null && /^\d+$/.test(rawSince) ? Number(rawSince) : undefined;
-    const { entries, cursor } = await readBlackboardPage(app.data, planKey, { since });
-    return { status: 200, body: { planKey, entries, cursor } };
-  }
-
-  if (req.method === "POST") {
-    // biome-ignore lint/plugin: runtime/framework contract boundary for external data shape
-    const b = (body ?? {}) as Record<string, unknown>;
-    const text = typeof b.body === "string" ? b.body.trim() : "";
-    if (!text) return { status: 400, body: { error: "'body' (the note text) is required" } };
-    const kind = normalizeKind(b.kind);
-    const files = Array.isArray(b.files) ? b.files.map(String) : [];
-    // Normalize once (trim + default to "system") so the value we send to appendEntry matches the
-    // value we send to detectFileClaimConflicts. Otherwise an omitted/blank author_task is stored as
-    // "system" but conflict detection sees "", and the caller's own prior "system" claims are wrongly
-    // reported as sibling conflicts.
-    const author_task = (typeof b.author_task === "string" ? b.author_task.trim() : "") || "system";
-    const res = await appendEntry(app.data, planKey, {
-      author_task,
-      kind,
-      files,
-      body: text,
-      wave: typeof b.wave === "number" ? b.wave : null,
-      dedupe_key: typeof b.dedupe_key === "string" ? b.dedupe_key : undefined,
-    });
-    // Advisory conflict-of-intent: surface prior sibling claims on the same file(s). Computed AFTER
-    // the append and filtered to claims strictly before ours (id < res.id), so first-writer-wins is
-    // decided by insertion order — a sibling that raced a claim in between is still caught, and our
-    // own just-written row is never reported. Never blocks the append — the agent decides how to react.
-    const conflicts = kind === "file-claim"
-      ? await detectFileClaimConflicts(app.data, planKey, {
-        author_task,
-        files,
-        beforeId: Number(res.id),
-      })
-      : [];
-    return {
-      status: res.inserted ? 201 : 200,
-      body: { id: Number(res.id), inserted: res.inserted, conflicts },
-    };
-  }
-
-  return { status: 405, body: { error: "method not allowed (use GET or POST)" } };
-};
-
-export default handler;

package/actions/feature-answer-hook.ts

@@ -1,45 +0,0 @@
-// POST /hooks/feature-answer — answer an implementation-phase task escalation out
-// of band (optional shared-secret guard via X-Hook-Secret, enforced only when
-// NANO_PR_WEBHOOK_SECRET is set — mirrors /hooks/submit and /hooks/plan), issue #25.
-// Lets an external
-// system (a chat relay, a CI job, a human via curl) resume a parked implementation
-// agent without the page. Same idempotent `answerTaskEscalation` path the page's
-// answer form uses.
-//
-// Body accepts either the raw correlation key or a plan+task pair:
-//   { "corrKey": "owner/repo#12:task-3", "answer": "…" }
-//   { "plan": "owner/repo#12", "task": "task-3", "answer": "…" }
-import type { ActionHandler } from "@nanobpm/urban";
-import { answerTaskEscalation, featureCorrKey } from "../app/plan.ts";
-
-const WEBHOOK_SECRET = process.env.NANO_PR_WEBHOOK_SECRET ?? "";
-
-const str = (v: unknown): string => (typeof v === "string" ? v.trim() : "");
-
-const handler: ActionHandler = async ({ req, body }, app) => {
-  if (WEBHOOK_SECRET && req.headers.get("x-hook-secret") !== WEBHOOK_SECRET) {
-    return { status: 401, body: { error: "unauthorized" } };
-  }
-  // biome-ignore lint/plugin: runtime/framework contract boundary for external data shape
-  const b = (body ?? {}) as {
-    corrKey?: unknown;
-    plan?: unknown;
-    task?: unknown;
-    answer?: unknown;
-  };
-  const answer = str(b.answer);
-  if (!answer) return { status: 400, body: { error: "answer is required" } };
-
-  const corrKey = str(b.corrKey) || (str(b.plan) && str(b.task) ? featureCorrKey(str(b.plan), str(b.task)) : "");
-  if (!corrKey) {
-    return {
-      status: 400,
-      body: { error: "provide corrKey, or both plan (owner/repo#N) and task" },
-    };
-  }
-
-  const r = await answerTaskEscalation(app.data, app.engine, corrKey, answer);
-  return { status: r.ok ? 200 : 404, body: r };
-};
-
-export default handler;

package/actions/plan-hook.ts

@@ -1,20 +0,0 @@
-// POST /hooks/plan — kick off a planning fan-out out of band (shared-secret auth via
-// X-Hook-Secret). Lets an external system (a GitHub webhook relay on issue open/label, a CI job)
-// hand an issue to the fleet. Same idempotent startPlan path as the page's "Plan issue" action.
-import type { ActionHandler } from "@nanobpm/urban";
-import { parseIssue, startPlan } from "../app/plan.ts";
-
-const WEBHOOK_SECRET = process.env.NANO_PR_WEBHOOK_SECRET ?? "";
-
-const handler: ActionHandler = async ({ req, body }, app) => {
-  if (WEBHOOK_SECRET && req.headers.get("x-hook-secret") !== WEBHOOK_SECRET) {
-    return { status: 401, body: { error: "unauthorized" } };
-  }
-  // biome-ignore lint/plugin: runtime/framework contract boundary for external data shape
-  const b = (body ?? {}) as { url?: unknown; issue?: unknown };
-  const parsed = parseIssue(String(b.issue ?? b.url ?? ""));
-  if (!parsed) return { status: 400, body: { error: "could not parse issue (use owner/repo#123 or an issue URL)" } };
-  return { status: 202, body: await startPlan(app.data, app.engine, parsed) };
-};
-
-export default handler;

package/actions/webhook-submit.ts

@@ -1,22 +0,0 @@
-// POST /hooks/submit — submit a PR out-of-band (shared-secret auth via X-Hook-Secret). Not
-// part of the page UI; lets an external system (a GitHub webhook relay, a CI job) kick off a
-// convergence run. Same idempotent submit path as the page's "Start review" action.
-import type { ActionHandler } from "@nanobpm/urban";
-import { clampRounds, MAX_ROUNDS, parsePr, submitPr } from "../app/service.ts";
-
-const WEBHOOK_SECRET = process.env.NANO_PR_WEBHOOK_SECRET ?? "";
-
-const handler: ActionHandler = async ({ req, body }, app) => {
-  if (WEBHOOK_SECRET && req.headers.get("x-hook-secret") !== WEBHOOK_SECRET) {
-    return { status: 401, body: { error: "unauthorized" } };
-  }
-  // biome-ignore lint/plugin: runtime/framework contract boundary for external data shape
-  const b = (body ?? {}) as { url?: unknown; pr?: unknown; dependsOn?: unknown; maxRounds?: unknown };
-  const parsed = parsePr(String(b.url ?? b.pr ?? ""));
-  if (!parsed) return { status: 400, body: { error: "could not parse PR url" } };
-  const dependsOn = Array.isArray(b.dependsOn) ? b.dependsOn.map((d) => String(d)) : [];
-  const maxRounds = clampRounds(b.maxRounds, MAX_ROUNDS);
-  return { status: 202, body: await submitPr(app.data, app.engine, parsed, dependsOn, maxRounds) };
-};
-
-export default handler;

package/deno.json

@@ -1,24 +0,0 @@
-{
-  "compilerOptions": {
-    "lib": [
-      "deno.window",
-      "deno.ns"
-    ]
-  },
-  "imports": {
-    "@nanobpm/urban": "npm:@nanobpm/urban@^0.33.0"
-  },
-  "tasks": {
-    "start": "deno run --allow-net --allow-read --allow-write --allow-run=gh --allow-env main.ts",
-    "purge": "deno run --allow-read --allow-write --allow-env scripts/purge-db.ts",
-    "check": "deno run -A @nanobpm/urban check",
-    "check:prompts": "deno run -A scripts/check-agent-prompts.ts",
-    "gen": "deno run -A @nanobpm/urban gen",
-    "gen:check": "deno run -A @nanobpm/urban gen --check",
-    "layout": "deno run -A scripts/layout-bpmn.ts",
-    "layout:check": "deno run -A scripts/layout-bpmn.ts --check",
-    "dev": "deno run -A @nanobpm/urban dev",
-    "compile": "deno compile --allow-net --allow-read --allow-write --allow-run=gh --allow-env -o dist/nano-workforce main.ts",
-    "test": "deno test -A"
-  }
-}