@open-everywhere/provider-github 0.0.0-stage → 0.1.0

package/dist/agent/channels/github-identity.js

@@ -0,0 +1,295 @@
+// Pure GitHub→OpenEverywhere identity capture. The GitHub channel (github.ts) calls
+// these from its `onComment` hook to stow RAW GitHub facts (repo owner/name + privacy +
+// conversation anchor + actor) into the session auth context's `attributes`. The
+// INTERPRETATION of those facts into visibility/trust lives here too (githubVisibility/
+// githubTrust) — kept beside the capture so the mapper in agent/identity/binding.ts
+// (bindGitHub) just calls them, exactly as Slack/Teams split capture from
+// interpretation. This file imports no eve types, so it's trivially unit-testable.
+//
+// The two security-critical decisions are ONE tested place each and both FAIL CLOSED:
+//   - githubVisibility: "is this a world-readable (public-repo) surface whose learnings
+//     may flow up to shared memory?" — only an explicit public repo yields `public`.
+//   - githubTrust: "is this surface positively inside the org trust boundary?" — only a
+//     PRIVATE repo touched by an org OWNER/MEMBER yields `internal`; everything else
+//     (public repos, outside collaborators, missing signals) → no verdict, so bindFrom
+//     binds it `external`.
+//
+// GitHub has no 1:1 DM surface (every issue/PR/review thread is a shared conversation on
+// a repo), so mode is always "channel" — bindGitHub inlines that, no helper needed.
+//
+// The IDENTITY MAPPER (bindGitHub) lives here too (moved out of core identity/binding.ts in
+// OPE-114 stage 4, mirroring the notion bundle): registerGithubProvider() registers it via the
+// registerIdentityMapper seam. The only imports are TYPE-ONLY barrel contracts (erased at
+// compile), so the file stays trivially unit-testable.
+/** Build the auth context OpenEverywhere dispatches with — raw facts as string attributes. */
+export function buildGitHubAuth(input) {
+    const attributes = {
+        owner: input.owner,
+        repo: input.repo,
+        user_login: input.actorLogin,
+    };
+    if (input.repositoryFullName)
+        attributes.repository = input.repositoryFullName;
+    if (typeof input.repositoryId === "number")
+        attributes.repository_id = String(input.repositoryId);
+    if (typeof input.isPrivate === "boolean")
+        attributes.repo_private = String(input.isPrivate);
+    if (input.conversationKind)
+        attributes.conversation_kind = input.conversationKind;
+    if (typeof input.issueNumber === "number")
+        attributes.issue_number = String(input.issueNumber);
+    if (typeof input.pullRequestNumber === "number")
+        attributes.pull_request_number = String(input.pullRequestNumber);
+    if (typeof input.reviewThreadRootCommentId === "number")
+        attributes.review_thread_root_comment_id = String(input.reviewThreadRootCommentId);
+    if (typeof input.installationId === "number")
+        attributes.installation_id = String(input.installationId);
+    if (typeof input.actorId === "number")
+        attributes.user_id = String(input.actorId);
+    if (input.actorType)
+        attributes.user_type = input.actorType;
+    if (input.authorAssociation)
+        attributes.author_association = input.authorAssociation;
+    return {
+        authenticator: "github",
+        principalId: input.actorLogin,
+        principalType: input.actorType === "Bot" ? "service" : "github-user",
+        attributes,
+    };
+}
+/**
+ * A comment @mentions the bot and should wake a turn. Faithfully mirrors eve's
+ * internal gate (shouldDispatchGitHubComment: isIgnoredGitHubComment +
+ * extractGitHubCommentTrigger), which is NOT on eve's public export surface — so we
+ * replicate it here (small, deterministic, and unit-tested) rather than reach into a
+ * package-internal path. Kept byte-consistent with eve because the channel's message
+ * layer still strips the mention token via eve's own extractGitHubCommentTrigger; a
+ * divergent gate here would fire turns eve then can't strip. FAIL CLOSED: no botName,
+ * a bot author, the bot's own comments, or eve's marker → no wake.
+ */
+export function githubBotMentioned(body, botName, author) {
+    const name = botName?.trim();
+    if (!name || !body)
+        return false;
+    if (body.includes("<!-- eve:github:"))
+        return false; // eve's own comment marker — never self-trigger
+    if (author?.type === "Bot")
+        return false; // ignore bot actors (loop guard)
+    if (author?.login && author.login.toLowerCase() === `${name}[bot]`.toLowerCase())
+        return false; // the bot itself
+    const escaped = name.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+    // "@name" not followed by a word char — matches eve's `@${name}(?=$|[^A-Za-z0-9_-])`.
+    return new RegExp(`@${escaped}(?=$|[^A-Za-z0-9_-])`, "iu").test(body);
+}
+/**
+ * GitHub repo privacy → visibility. FAIL CLOSED, mirroring slackVisibility/
+ * linearVisibility: only an explicitly PUBLIC repo (`repo_private="false"`) yields
+ * `public`; a private repo (`"true"`) or an unknown signal → `private`, so an
+ * under-identified session or a private repo never writes its learnings up to shared
+ * (workspace) memory. A public repo's issue/PR threads are world-readable, so treating
+ * them as a public surface (learnings may flow to the workspace brain across the org's
+ * repos) is correct; anything we can't confirm public stays surface-tier private.
+ */
+export function githubVisibility(repoPrivate) {
+    if (repoPrivate === "false")
+        return "public";
+    return "private"; // "true" or unknown → fail closed
+}
+/**
+ * GitHub actor + repo privacy → trust (the shared-memory gate). FAIL CLOSED — only a
+ * POSITIVE in-boundary fact yields a verdict:
+ *   - A PRIVATE repo (only org members + invited collaborators can see it) touched by an
+ *     org OWNER or MEMBER → `internal`. OWNER/MEMBER are GitHub's strong "part of the org
+ *     that owns this repo" signals (`author_association`); on a private repo that means an
+ *     insider acting inside the boundary, so shared/org memory is safe to read.
+ *   - ANYTHING ELSE → `undefined`, so bindFrom FAILS CLOSED to `external`:
+ *       · a PUBLIC repo — world-readable, anyone (external contributors) can comment, so it
+ *         must never light up the org brain regardless of who this particular actor is;
+ *       · a private repo touched by a COLLABORATOR (may be an OUTSIDE collaborator),
+ *         CONTRIBUTOR, first-timer, mannequin, NONE, or a missing/unknown association;
+ *       · a missing repo-privacy signal.
+ * The operator can still vouch for a deployment with OE_TRUST=internal — the same layer
+ * Slack-DM/Teams/Discord/Linear use. An ambiguous GitHub event must never reach
+ * the shared org brain. (Per-repo collaborator-membership enrichment — GET
+ * /repos/{o}/{r}/collaborators/{u}/permission — is the future layer-2 gate that could
+ * promote a verified internal collaborator; until then, only OWNER/MEMBER on a private
+ * repo is trusted.)
+ */
+export function githubTrust(repoPrivate, authorAssociation) {
+    if (repoPrivate !== "true")
+        return undefined; // public / unknown repo → no verdict (binds external)
+    if (authorAssociation === "OWNER" || authorAssociation === "MEMBER")
+        return "internal";
+    return undefined; // collaborator/contributor/outside/unknown on a private repo → fail closed
+}
+// --- the EXTERNAL-AUTHOR grain (OPE-533) --------------------------------------------------------
+//
+// THE EVIDENCE IS FREE. GitHub reports `author_association` on every `issue_comment` payload, and
+// {@link buildGitHubAuth} already stows it. The author grain needs no new call and no new
+// installation permission — the org-membership probe (`orgs/{org}/members/{user}`) would need the
+// "Members" permission, which every installed org would have to re-approve.
+//
+// 🔴 THE SET IS A RULING, NOT AN INFERENCE (Tommy, 2026-08-14). INTERNAL is the three values that
+// each carry a DELIBERATE ACCESS GRANT on the repo: `OWNER`, `MEMBER`, `COLLABORATOR`. Every other
+// value is EXCLUDED. Tommy verbatim: "contributor shouldn't be trusted" — a past merged PR is not an
+// access grant. `MANNEQUIN` is an import placeholder with no live person behind it, so it is
+// excluded as hygiene.
+//
+// 🔴 THIS IS A DIFFERENT QUESTION FROM {@link githubTrust}, AND THE TWO MUST NOT BE MERGED.
+// `githubTrust` asks "may this session read the shared org brain?" and fails CLOSED, so it demands
+// a PRIVATE repo AND an OWNER/MEMBER author. This asks "may this person's bytes task the agent?"
+// and fails OPEN. A COLLABORATOR is internal here and still not trusted there, which is correct:
+// denying service is a different act from opening the org's memory.
+/** `author_association` values that carry a deliberate access grant on the repo — the INTERNAL set. */
+export const GITHUB_INTERNAL_ASSOCIATIONS = ["OWNER", "MEMBER", "COLLABORATOR"];
+/** `author_association` values that carry NO access grant — the EXCLUDED (external) set. This is
+ *  GitHub's whole documented enum minus {@link GITHUB_INTERNAL_ASSOCIATIONS}, written out rather
+ *  than derived by negation: see {@link githubAssociationRefutes} for why the difference matters. */
+export const GITHUB_EXTERNAL_ASSOCIATIONS = [
+    "CONTRIBUTOR",
+    "FIRST_TIME_CONTRIBUTOR",
+    "FIRST_TIMER",
+    "NONE",
+    "MANNEQUIN",
+];
+/**
+ * Does this `author_association` POSITIVELY refute the author's membership?
+ *
+ * 🔴 IT MATCHES THE EXCLUDED SET, IT DOES NOT NEGATE THE INTERNAL ONE, and the difference is the
+ * whole fail-open posture. An ABSENT association (a payload shape GitHub changed, a synthesised
+ * event) and an UNRECOGNISED one (a value GitHub adds later) both answer `false` — "not refuted",
+ * which is what `IngestedChatMessage.refuted` means by absence of evidence. Negating the internal
+ * set would read every unknown as external and take the agent off the air on a payload change.
+ *
+ * Case-sensitive on purpose: GitHub sends these values upper-case, and accepting a lower-case
+ * variant would be inventing a second spelling of a vendor enum.
+ */
+export function githubAssociationRefutes(authorAssociation) {
+    return authorAssociation !== undefined && GITHUB_EXTERNAL_ASSOCIATIONS.includes(authorAssociation);
+}
+/**
+ * The author grain's evidence for one GitHub comment, in the core's own vocabulary
+ * (`IngestedChatMessage`) so access/external-policy.ts answers the exclusion question — this bundle
+ * never re-derives it.
+ *
+ * A `Bot` actor grades as the machine floor `relay` and is therefore NEVER excluded, which is the
+ * core's own ruling (access/taint-signal.ts `nonMemberChatTrust`): a bot is below peer standing but
+ * it is not a person outside the organisation, and withholding every app's comments would be an
+ * outage. Stating it as the tier rather than as a local `if` keeps ONE place deciding.
+ *
+ * A human author carries `refuted` only when {@link githubAssociationRefutes} says so. `trust` is
+ * left ABSENT for a human on purpose: this runs before the per-wake trust resolution, so naming a
+ * tier here would be a guess, and the refutation leg needs no tier.
+ */
+export function githubAuthorFacts(input) {
+    if (input.actorType === "Bot")
+        return { trust: "relay" };
+    return githubAssociationRefutes(input.authorAssociation) ? { refuted: true } : {};
+}
+function githubAuthOf(ctx) {
+    return ctx.session?.auth?.current ?? ctx.session?.auth?.initiator ?? null;
+}
+function githubAttr(a, keys) {
+    if (!a)
+        return undefined;
+    for (const k of keys) {
+        const v = a[k];
+        if (typeof v === "string" && v.length > 0)
+            return v;
+        if (Array.isArray(v) && typeof v[0] === "string" && v[0].length > 0)
+            return v[0];
+    }
+    return undefined;
+}
+function githubAuthPrincipalId(ctx) {
+    const pid = githubAuthOf(ctx)?.principalId;
+    return pid && pid.length > 0 ? pid : undefined;
+}
+/**
+ * The CONVERSATION key the stop registry keys a GitHub turn by (OPE-898) — `owner/repo#number`.
+ *
+ * ONE derivation, used by BOTH sides of the affordance: {@link bindGitHub} writes it onto the anchor
+ * row at turn start, and the stop-comment leg (channels/github-stop.ts) rebuilds it from the webhook
+ * that carries the directive. Two spellings of this key would make the whole arm silently miss.
+ *
+ * It is NOT a surface key and never becomes one — the GitHub surface grain is the REPO, and this
+ * value names one issue or PR inside it. Returns undefined on any missing part: a partial key would
+ * collide across repos.
+ */
+export function githubConversationKey(owner, repo, number) {
+    return owner && repo && Number.isFinite(number) ? `${owner}/${repo}#${number}` : undefined;
+}
+/**
+ * The ROOT comment id of the review thread this turn arrived in, or `undefined` (OPE-958). The read
+ * side of {@link GitHubIdentityInput.reviewThreadRootCommentId} — this file owns the attribute
+ * spelling on BOTH sides, so a rename cannot leave the reader looking for a key nobody writes.
+ *
+ * It reads the AUTH ATTRIBUTES rather than the composed binding on purpose. `RawIdentity.target` is
+ * eve's `GitHubReceiveTarget` and throws on a member it does not know, so the root cannot ride
+ * there, and no other binding field names a comment.
+ *
+ * Returns the id as a STRING of digits, which is what `ReadAdapter.readThread` takes as its thread
+ * id. A non-numeric value is treated as absent: a review thread id that is not a comment id would
+ * fetch nothing, and refusing honestly beats reading an empty thread.
+ */
+export function githubReviewThreadRoot(ctx) {
+    const raw = githubAttr(githubAuthOf(ctx)?.attributes, ["review_thread_root_comment_id", "reviewThreadRootCommentId"]);
+    return raw !== undefined && /^\d+$/u.test(raw) ? raw : undefined;
+}
+export const bindGitHub = (ctx) => {
+    const a = githubAuthOf(ctx)?.attributes;
+    const owner = githubAttr(a, ["owner"]);
+    const repo = githubAttr(a, ["repo"]);
+    const repoPrivate = githubAttr(a, ["repo_private", "repoPrivate"]);
+    const conversationKind = githubAttr(a, ["conversation_kind", "conversationKind"]);
+    const issueNumber = githubAttr(a, ["issue_number", "issueNumber"]);
+    const pullRequestNumber = githubAttr(a, ["pull_request_number", "pullRequestNumber"]);
+    const installationId = githubAttr(a, ["installation_id", "installationId"]);
+    // Proactive post-back uses eve's GitHubReceiveTarget: { owner, repo, and EXACTLY ONE of
+    // issueNumber | pullRequestNumber } (supplying both throws). Pick the PR number for a
+    // pull_request/review_thread conversation, else the issue number. Only emitted when we
+    // have owner + repo + a usable anchor number.
+    const isPr = conversationKind === "pull_request" || conversationKind === "review_thread";
+    const anchor = isPr && pullRequestNumber
+        ? { pullRequestNumber: Number(pullRequestNumber) }
+        : issueNumber
+            ? { issueNumber: Number(issueNumber) }
+            : pullRequestNumber
+                ? { pullRequestNumber: Number(pullRequestNumber) }
+                : undefined;
+    return {
+        workspace: owner,
+        surface: repo,
+        mode: "channel", // GitHub has no DM analog — every issue/PR/review thread is shared
+        visibility: githubVisibility(repoPrivate),
+        trust: githubTrust(repoPrivate, githubAttr(a, ["author_association", "authorAssociation"])),
+        principalId: githubAuthPrincipalId(ctx) ?? githubAttr(a, ["user_login", "userLogin", "user_id", "userId"]),
+        // OPE-811: `installationId` rides the post-back target so the mid-turn `reply` arm mints its
+        // token against THIS wake's own installation instead of falling back to the owner→installation
+        // map. Absent when the webhook carried none — the arm's map lookup is the fallback, never a guess.
+        target: owner && repo && anchor ? { owner, repo, ...anchor, ...(installationId ? { installationId: Number(installationId) } : {}) } : undefined,
+        // THE STOP REGISTRY'S ADDRESS FOR THIS TURN (OPE-898). A GitHub conversation is ONE issue or PR
+        // thread, so that is what a stop directive posted into the thread can name. It cannot ride
+        // `target`: that object is eve's `GitHubReceiveTarget` and it throws on an unexpected member.
+        //
+        // GitHub sends NO webhook for a reaction (verified against the event list, 2026-08-20), so the
+        // trigger on this surface is a bare `stop` comment read at the ingress — see
+        // channels/github-stop.ts. The key it resolves by is this one.
+        ...(anchor
+            ? {
+                anchorChannelId: githubConversationKey(owner, repo, "pullRequestNumber" in anchor ? anchor.pullRequestNumber : anchor.issueNumber),
+                // THE ENGAGEMENT REGISTRY'S ADDRESS FOR THIS TURN (OPE-1501) — the SAME container key, and
+                // deliberately the same derivation rather than a second spelling of it. `stand_down` marks
+                // `binding.engagementKey ?? binding.threadTs`, and GitHub carries no `threadTs`, so
+                // without this field the verb found no anchor and refused on every GitHub turn.
+                //
+                // It is a SEPARATE field from `anchorChannelId` because the two answer different
+                // questions — which running turn a stop directive cancels, and which conversation row the
+                // agent was asked to stop following — and `channels/github-engagement.ts` reads this one
+                // back through `githubEngagementAnchor`, which calls the very same function.
+                engagementKey: githubConversationKey(owner, repo, "pullRequestNumber" in anchor ? anchor.pullRequestNumber : anchor.issueNumber),
+            }
+            : {}),
+    };
+};
+//# sourceMappingURL=github-identity.js.map

package/dist/agent/channels/github-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-identity.js","sourceRoot":"","sources":["../../../agent/channels/github-identity.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wFAAwF;AACxF,iFAAiF;AACjF,wFAAwF;AACxF,oFAAoF;AACpF,0EAA0E;AAC1E,mFAAmF;AACnF,EAAE;AACF,sFAAsF;AACtF,wFAAwF;AACxF,qFAAqF;AACrF,wFAAwF;AACxF,qFAAqF;AACrF,uFAAuF;AACvF,2BAA2B;AAC3B,EAAE;AACF,yFAAyF;AACzF,oFAAoF;AACpF,EAAE;AACF,4FAA4F;AAC5F,+FAA+F;AAC/F,0FAA0F;AAC1F,uDAAuD;AAqDvD,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAAC,KAA0B;IACxD,MAAM,UAAU,GAA2B;QACzC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;IACF,IAAI,KAAK,CAAC,kBAAkB;QAAE,UAAU,CAAC,UAAU,GAAG,KAAK,CAAC,kBAAkB,CAAC;IAC/E,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QAAE,UAAU,CAAC,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAClG,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,UAAU,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5F,IAAI,KAAK,CAAC,gBAAgB;QAAE,UAAU,CAAC,iBAAiB,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAClF,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QAAE,UAAU,CAAC,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/F,IAAI,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ;QAAE,UAAU,CAAC,mBAAmB,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAClH,IAAI,OAAO,KAAK,CAAC,yBAAyB,KAAK,QAAQ;QAAE,UAAU,CAAC,6BAA6B,GAAG,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC5I,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;QAAE,UAAU,CAAC,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACxG,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,UAAU,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClF,IAAI,KAAK,CAAC,SAAS;QAAE,UAAU,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAC5D,IAAI,KAAK,CAAC,iBAAiB;QAAE,UAAU,CAAC,kBAAkB,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACrF,OAAO;QACL,aAAa,EAAE,QAAQ;QACvB,WAAW,EAAE,KAAK,CAAC,UAAU;QAC7B,aAAa,EAAE,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;QACpE,UAAU;KACX,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAwB,EACxB,OAA2B,EAC3B,MAAuE;IAEvE,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,gDAAgD;IACrG,IAAI,MAAM,EAAE,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,iCAAiC;IAC3E,IAAI,MAAM,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE;QAAE,OAAO,KAAK,CAAC,CAAC,iBAAiB;IACjH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IAC7D,sFAAsF;IACtF,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,sBAAsB,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAA+B;IAC9D,IAAI,WAAW,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAO,SAAS,CAAC,CAAC,kCAAkC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,WAAW,CAAC,WAA+B,EAAE,iBAAqC;IAChG,IAAI,WAAW,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC,CAAC,sDAAsD;IACpG,IAAI,iBAAiB,KAAK,OAAO,IAAI,iBAAiB,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IACvF,OAAO,SAAS,CAAC,CAAC,2EAA2E;AAC/F,CAAC;AAMD,mGAAmG;AACnG,EAAE;AACF,kGAAkG;AAClG,0FAA0F;AAC1F,kGAAkG;AAClG,4EAA4E;AAC5E,EAAE;AACF,kGAAkG;AAClG,mGAAmG;AACnG,qGAAqG;AACrG,6FAA6F;AAC7F,uBAAuB;AACvB,EAAE;AACF,4FAA4F;AAC5F,mGAAmG;AACnG,iGAAiG;AACjG,iGAAiG;AACjG,oEAAoE;AAEpE,uGAAuG;AACvG,MAAM,CAAC,MAAM,4BAA4B,GAAsB,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;AAEnG;;qGAEqG;AACrG,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,aAAa;IACb,wBAAwB;IACxB,aAAa;IACb,MAAM;IACN,WAAW;CACZ,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CAAC,iBAAqC;IAC5E,OAAO,iBAAiB,KAAK,SAAS,IAAI,4BAA4B,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;AACrG,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAGjC;IACC,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACzD,OAAO,wBAAwB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC;AAoBD,SAAS,YAAY,CAAC,GAAoB;IACxC,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC;AAC5E,CAAC;AAED,SAAS,UAAU,CAAC,CAAY,EAAE,IAAuB;IACvD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;QACpD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAoB;IACjD,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC;IAC3C,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAyB,EAAE,IAAwB,EAAE,MAA0B;IACnH,OAAO,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7F,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAoB;IACzD,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,+BAA+B,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACtH,OAAO,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAmB,CAAC,GAAG,EAAe,EAAE;IAC7D,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IACxC,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAClF,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACtF,MAAM,cAAc,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5E,wFAAwF;IACxF,sFAAsF;IACtF,uFAAuF;IACvF,8CAA8C;IAC9C,MAAM,IAAI,GAAG,gBAAgB,KAAK,cAAc,IAAI,gBAAgB,KAAK,eAAe,CAAC;IACzF,MAAM,MAAM,GACV,IAAI,IAAI,iBAAiB;QACvB,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE;QAClD,CAAC,CAAC,WAAW;YACX,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE;YACtC,CAAC,CAAC,iBAAiB;gBACjB,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE;gBAClD,CAAC,CAAC,SAAS,CAAC;IACpB,OAAO;QACL,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,SAAS,EAAE,mEAAmE;QACpF,UAAU,EAAE,gBAAgB,CAAC,WAAW,CAAC;QACzC,KAAK,EAAE,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC3F,WAAW,EAAE,qBAAqB,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1G,6FAA6F;QAC7F,+FAA+F;QAC/F,mGAAmG;QACnG,MAAM,EAAE,KAAK,IAAI,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QAC/I,gGAAgG;QAChG,2FAA2F;QAC3F,8FAA8F;QAC9F,EAAE;QACF,+FAA+F;QAC/F,6EAA6E;QAC7E,+DAA+D;QAC/D,GAAG,CAAC,MAAM;YACR,CAAC,CAAC;gBACE,eAAe,EAAE,qBAAqB,CACpC,KAAK,EACL,IAAI,EACJ,mBAAmB,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAC9E;gBACD,2FAA2F;gBAC3F,2FAA2F;gBAC3F,oFAAoF;gBACpF,gFAAgF;gBAChF,EAAE;gBACF,iFAAiF;gBACjF,0FAA0F;gBAC1F,yFAAyF;gBACzF,6EAA6E;gBAC7E,aAAa,EAAE,qBAAqB,CAClC,KAAK,EACL,IAAI,EACJ,mBAAmB,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAC9E;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC,CAAC"}

package/dist/agent/channels/github-installations.d.ts

@@ -0,0 +1,49 @@
+/** One installation delivery, normalized. `effect` is the whole decision; everything else is the
+ *  row/audit payload. */
+export interface GitHubInstallationEvent {
+    readonly effect: "learn" | "revoke";
+    /** The webhook's `action` — carried verbatim into the audit row (why the effect happened). */
+    readonly action: string;
+    /** `installation.account.login` — the SCM map's key. */
+    readonly owner: string;
+    readonly installationId: string;
+    /** `installation.account.type` — "Organization" | "User". */
+    readonly accountType?: string;
+    /** `installation.repository_selection` — "all" | "selected". */
+    readonly repositorySelection?: string;
+    /** How many repos the delivery named, when it named any (diagnostics in the audit row only —
+     *  the repo LIST is never stored; the App's own grant is the source of truth). */
+    readonly repositoryCount?: number;
+}
+/**
+ * Normalize one webhook delivery into a {@link GitHubInstallationEvent}, or null when it isn't an
+ * installation delivery we act on. PURE — no I/O, so every branch is unit-tested.
+ *
+ * FAIL-CLOSED on an unusable payload: an unknown action, a missing `installation.id`, or a missing
+ * `installation.account.login` all return null (nothing learned, nothing revoked) rather than
+ * writing a half-formed row. An installation with no resolvable owner is unroutable anyway.
+ */
+export declare function extractGitHubInstallationEvent(eventType: string, payload: Record<string, unknown>): GitHubInstallationEvent | null;
+/** The side-effecting seams, injected so the dispatch core is testable without a store or a clock. */
+export interface GitHubInstallationDeps {
+    readonly record: (rec: {
+        owner: string;
+        installationId: string;
+        accountType?: string;
+        repositorySelection?: string;
+        updatedAt: string;
+    }) => Promise<void>;
+    readonly forget: (owner: string) => Promise<boolean>;
+    readonly audit: (action: string, detail: Record<string, unknown>, workspace: string) => Promise<void>;
+    readonly now?: () => string;
+    readonly log?: (msg: string) => void;
+}
+/**
+ * Apply one normalized delivery: persist-or-clear the owner→installation entry, then audit it.
+ *
+ * ORDER IS DELIBERATE — the durable write happens FIRST and its failure propagates (the route's
+ * catch logs it), so we never audit an install we didn't actually record. The audit row is written
+ * after, best-effort at the appendAudit layer.
+ */
+export declare function handleGitHubInstallationDelivery(ev: GitHubInstallationEvent, deps: GitHubInstallationDeps): Promise<void>;
+//# sourceMappingURL=github-installations.d.ts.map

package/dist/agent/channels/github-installations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-installations.d.ts","sourceRoot":"","sources":["../../../agent/channels/github-installations.ts"],"names":[],"mappings":"AAwBA;yBACyB;AACzB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,QAAQ,CAAC;IACpC,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,6DAA6D;IAC7D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC;sFACkF;IAClF,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAoBD;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,uBAAuB,GAAG,IAAI,CAiClI;AAED,sGAAsG;AACtG,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,SAAS,EAAE,MAAM,CAAC;KACnB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtG,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAED;;;;;;GAMG;AACH,wBAAsB,gCAAgC,CAAC,EAAE,EAAE,uBAAuB,EAAE,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0B/H"}

package/dist/agent/channels/github-installations.js

@@ -0,0 +1,114 @@
+// The GitHub App's INSTALLATION leg — the eve-free, tested half of "an org installing the App
+// registers itself" (OPE-118 GitHub §3; github.ts is the thin wiring, mirroring github-supervisor.ts).
+//
+// GitHub's App-level webhook (ONE url + ONE secret, fanning in every installation of the App across
+// every account) delivers:
+//   • `installation` — actions `created`, `deleted`, `suspend`, `unsuspend`, `new_permissions_accepted`
+//   • `installation_repositories` — actions `added`, `removed` (the repo-scope change)
+// Verified against docs.github.com/en/webhooks/webhook-events-and-payloads (2026-07). We map those
+// onto exactly two effects, LEARN and REVOKE:
+//   LEARN   ← created / unsuspend / new_permissions_accepted / added / removed
+//   REVOKE  ← deleted / suspend
+// `suspend` revokes because a suspended installation's tokens are refused by GitHub — keeping the
+// row would advertise an installation that cannot mint, and `unsuspend` re-learns it. The two
+// metadata-only actions (`new_permissions_accepted`, and both `installation_repositories` actions)
+// re-LEARN rather than no-op so `repository_selection` on the row can't drift from reality.
+//
+// SIGNATURE: this module never verifies anything — it runs INSIDE the route, AFTER the one
+// existing `gateGithubDelivery` HMAC gate (GITHUB_WEBHOOK_SECRET) that already fail-closed 401s
+// every unverified delivery for the whole route. There is deliberately no second verification path.
+//
+// AUDIT: install/uninstall is a surface-lifecycle fact, so it takes the cross-platform `surface.*`
+// action namespace (the same one slack-front/teams-front's wake_failed/wake_dropped rows use),
+// not a github-only verb — an operator asking "who installed us, and when?" wants one query.
+const LEARN_ACTIONS = new Set(["created", "unsuspend", "new_permissions_accepted", "added", "removed"]);
+const REVOKE_ACTIONS = new Set(["deleted", "suspend"]);
+function str(v) {
+    return typeof v === "string" && v.length > 0 ? v : undefined;
+}
+/** GitHub sends `installation.id` as a NUMBER; the mint API wants a path segment. Accept both
+ *  spellings and reject anything else (never coerce an object/array into "[object Object]"). */
+function idOf(v) {
+    if (typeof v === "number" && Number.isFinite(v))
+        return String(v);
+    return str(v);
+}
+function countOf(v) {
+    return Array.isArray(v) ? v.length : undefined;
+}
+/**
+ * Normalize one webhook delivery into a {@link GitHubInstallationEvent}, or null when it isn't an
+ * installation delivery we act on. PURE — no I/O, so every branch is unit-tested.
+ *
+ * FAIL-CLOSED on an unusable payload: an unknown action, a missing `installation.id`, or a missing
+ * `installation.account.login` all return null (nothing learned, nothing revoked) rather than
+ * writing a half-formed row. An installation with no resolvable owner is unroutable anyway.
+ */
+export function extractGitHubInstallationEvent(eventType, payload) {
+    if (eventType !== "installation" && eventType !== "installation_repositories")
+        return null;
+    const action = str(payload["action"]);
+    if (!action)
+        return null;
+    const effect = LEARN_ACTIONS.has(action) ? "learn" : REVOKE_ACTIONS.has(action) ? "revoke" : undefined;
+    if (!effect)
+        return null;
+    const installation = payload["installation"];
+    if (typeof installation !== "object" || installation === null)
+        return null;
+    const inst = installation;
+    const installationId = idOf(inst["id"]);
+    if (!installationId)
+        return null;
+    const account = typeof inst["account"] === "object" && inst["account"] !== null ? inst["account"] : undefined;
+    const owner = str(account?.["login"]);
+    if (!owner)
+        return null;
+    // `repository_selection` sits on the installation for `installation`, and is re-sent at the TOP
+    // level of an `installation_repositories` delivery (that event's whole point is the change) —
+    // prefer the top-level value so a scope change is reflected, not the pre-change installation copy.
+    const repositorySelection = str(payload["repository_selection"]) ?? str(inst["repository_selection"]);
+    const repositoryCount = countOf(payload["repositories"]) ?? countOf(payload["repositories_added"]) ?? countOf(payload["repositories_removed"]);
+    return {
+        effect,
+        action,
+        owner,
+        installationId,
+        ...(str(account?.["type"]) ? { accountType: str(account?.["type"]) } : {}),
+        ...(repositorySelection ? { repositorySelection } : {}),
+        ...(repositoryCount !== undefined ? { repositoryCount } : {}),
+    };
+}
+/**
+ * Apply one normalized delivery: persist-or-clear the owner→installation entry, then audit it.
+ *
+ * ORDER IS DELIBERATE — the durable write happens FIRST and its failure propagates (the route's
+ * catch logs it), so we never audit an install we didn't actually record. The audit row is written
+ * after, best-effort at the appendAudit layer.
+ */
+export async function handleGitHubInstallationDelivery(ev, deps) {
+    const at = deps.now ? deps.now() : new Date().toISOString();
+    const detail = {
+        action: ev.action,
+        installationId: ev.installationId,
+        ...(ev.accountType ? { accountType: ev.accountType } : {}),
+        ...(ev.repositorySelection ? { repositorySelection: ev.repositorySelection } : {}),
+        ...(ev.repositoryCount !== undefined ? { repositoryCount: ev.repositoryCount } : {}),
+    };
+    if (ev.effect === "revoke") {
+        const removed = await deps.forget(ev.owner);
+        deps.log?.(`installation ${ev.action} for ${ev.owner} — ${removed ? "discovered entry cleared" : "no discovered entry to clear"}`);
+        await deps.audit("surface.app_uninstalled", { ...detail, removed }, ev.owner);
+        return;
+    }
+    await deps.record({
+        owner: ev.owner,
+        installationId: ev.installationId,
+        ...(ev.accountType ? { accountType: ev.accountType } : {}),
+        ...(ev.repositorySelection ? { repositorySelection: ev.repositorySelection } : {}),
+        updatedAt: at,
+    });
+    deps.log?.(`installation ${ev.action} for ${ev.owner} → installation ${ev.installationId} registered (no env edit needed)`);
+    await deps.audit("surface.app_installed", detail, ev.owner);
+}
+//# sourceMappingURL=github-installations.js.map

package/dist/agent/channels/github-installations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-installations.js","sourceRoot":"","sources":["../../../agent/channels/github-installations.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,uGAAuG;AACvG,EAAE;AACF,oGAAoG;AACpG,2BAA2B;AAC3B,wGAAwG;AACxG,uFAAuF;AACvF,mGAAmG;AACnG,8CAA8C;AAC9C,+EAA+E;AAC/E,gCAAgC;AAChC,kGAAkG;AAClG,8FAA8F;AAC9F,mGAAmG;AACnG,4FAA4F;AAC5F,EAAE;AACF,2FAA2F;AAC3F,gGAAgG;AAChG,oGAAoG;AACpG,EAAE;AACF,mGAAmG;AACnG,+FAA+F;AAC/F,6FAA6F;AAoB7F,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,0BAA0B,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AACxG,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAEvD,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED;gGACgG;AAChG,SAAS,IAAI,CAAC,CAAU;IACtB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,CAAU;IACzB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,8BAA8B,CAAC,SAAiB,EAAE,OAAgC;IAChG,IAAI,SAAS,KAAK,cAAc,IAAI,SAAS,KAAK,2BAA2B;QAAE,OAAO,IAAI,CAAC;IAC3F,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACvG,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7C,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3E,MAAM,IAAI,GAAG,YAAuC,CAAC;IACrD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IAEjC,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,SAAS,CAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3I,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,gGAAgG;IAChG,8FAA8F;IAC9F,mGAAmG;IACnG,MAAM,mBAAmB,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACtG,MAAM,eAAe,GACnB,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAEzH,OAAO;QACL,MAAM;QACN,MAAM;QACN,KAAK;QACL,cAAc;QACd,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAiBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,EAA2B,EAAE,IAA4B;IAC9G,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,MAAM,GAA4B;QACtC,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,cAAc,EAAE,EAAE,CAAC,cAAc;QACjC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,EAAE,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrF,CAAC;IAEF,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,MAAM,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,8BAA8B,EAAE,CAAC,CAAC;QACnI,MAAM,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IAED,MAAM,IAAI,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,cAAc,EAAE,EAAE,CAAC,cAAc;QACjC,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,SAAS,EAAE,EAAE;KACd,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC,MAAM,QAAQ,EAAE,CAAC,KAAK,mBAAmB,EAAE,CAAC,cAAc,kCAAkC,CAAC,CAAC;IAC5H,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC"}

package/dist/agent/channels/github-message-ops.d.ts

@@ -0,0 +1,3 @@
+import type { SurfaceMessageOps } from "@open-everywhere/core/agent/adapter-api.js";
+export declare const githubMessageOps: SurfaceMessageOps;
+//# sourceMappingURL=github-message-ops.d.ts.map

package/dist/agent/channels/github-message-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-message-ops.d.ts","sourceRoot":"","sources":["../../../agent/channels/github-message-ops.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAYpF,eAAO,MAAM,gBAAgB,EAAE,iBAe9B,CAAC"}

package/dist/agent/channels/github-message-ops.js

@@ -0,0 +1,58 @@
+// github-message-ops — GitHub's SurfaceMessageOps (OPE-899): the ancillary message ops core
+// features dispatch through channels/surface-message-ops.ts. Before this file, GitHub registered
+// none, so the stop acknowledgement (turn-anchor.ts's `postSurfaceText`) resolved nothing on a
+// GitHub turn — the stop control worked (github-stop.ts, the bare `stop` comment), it was just
+// invisible: a person who pressed it saw the agent go quiet and read nothing.
+//
+//   - postText    → the SAME issue/PR-timeline comment POST the reply spine uses
+//                   (github-post-arm.ts's `liveGitHubPost`, exported for this file — one mint/fetch
+//                   implementation, never a second copy of it).
+//   - editMessage → the SAME comment PATCH the `edit_reply` verb uses (`liveGitHubEditComment`).
+//   - NO `postFiles` (OPE-899's registry ruling): GitHub has no API for attaching a file to a
+//     comment — web upload only. The optional tier exists exactly for this shape.
+//   - NO `setReaction`: GitHub's reaction set is the fixed eight (+1, -1, laugh, confused, heart,
+//     hooray, rocket, eyes) — there is no raised hand. The bare `stop` comment (github-stop.ts) IS
+//     GitHub's stop affordance; there is no ✋ glyph to place beside it, so this module offers no
+//     `setReaction` rather than faking one against the wrong emoji.
+//
+// `channelId` IS THE CONVERSATION KEY `owner/repo#number`, not a GitHub-specific pair invented
+// here. `turn-anchor.ts`'s `turnAnchorAddress` reads it off `binding.anchorChannelId`, which
+// `bindGitHub` (github-identity.ts) mints through `githubConversationKey` — the SAME key
+// github-read.ts's `parseGithubContainer` already parses for the read adapter's container id. This
+// file reuses that parser rather than writing a second one: two derivations of the same address
+// would be exactly the "silently miss" trap github-identity.ts's own header warns about.
+//
+// `messageId` on `editMessage` is the COMMENT id `postText`/`liveGitHubPost` returned — GitHub's
+// comment ids are unique across the whole repo, so `editMessage` needs only the owner/repo half of
+// the parsed container, never the issue number.
+//
+// NO THREADING ON `postText`. GitHub's issue/PR-timeline comment stream is flat — there is no
+// "reply to this specific comment" primitive on the endpoint `liveGitHubPost` posts through (that
+// exists only for PR review comments, a different family this registry does not address) — so
+// `opts?.replyToMessageId` is accepted (the interface's contract) and ignored, exactly like a
+// top-level Slack post with no thread.
+import { liveGitHubEditComment, liveGitHubPost } from "./github-post-arm.js";
+import { parseGithubContainer } from "./github-read.js";
+/** Parse the `owner/repo#number` container id, or throw the same honest, naming refusal every
+ *  other surface-message-ops call gives on a malformed address — never a guessed target. */
+function requireContainer(channelId) {
+    const target = parseGithubContainer(channelId);
+    if (!target)
+        throw new Error(`GitHub surface message ops: "${channelId}" is not a conversation id (expected "owner/repo#number").`);
+    return target;
+}
+export const githubMessageOps = {
+    platform: "github",
+    /** Post to the issue/PR-timeline comment stream. `opts?.replyToMessageId` is accepted and
+     *  ignored — see the header's "NO THREADING" note. */
+    async postText(channelId, text) {
+        const { owner, repo, number } = requireContainer(channelId);
+        return liveGitHubPost({ platform: "github", owner, repo, issueNumber: number }, text);
+    },
+    /** PATCH the comment's body in place — the same edit `edit_reply` performs on the reply spine. */
+    async editMessage(channelId, messageId, text) {
+        const { repoFull } = requireContainer(channelId);
+        await liveGitHubEditComment(repoFull, messageId, text);
+    },
+};
+//# sourceMappingURL=github-message-ops.js.map

package/dist/agent/channels/github-message-ops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-message-ops.js","sourceRoot":"","sources":["../../../agent/channels/github-message-ops.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,iGAAiG;AACjG,+FAA+F;AAC/F,+FAA+F;AAC/F,8EAA8E;AAC9E,EAAE;AACF,iFAAiF;AACjF,oGAAoG;AACpG,gEAAgE;AAChE,iGAAiG;AACjG,8FAA8F;AAC9F,kFAAkF;AAClF,kGAAkG;AAClG,mGAAmG;AACnG,iGAAiG;AACjG,oEAAoE;AACpE,EAAE;AACF,+FAA+F;AAC/F,6FAA6F;AAC7F,yFAAyF;AACzF,mGAAmG;AACnG,gGAAgG;AAChG,yFAAyF;AACzF,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,gDAAgD;AAChD,EAAE;AACF,8FAA8F;AAC9F,kGAAkG;AAClG,8FAA8F;AAC9F,8FAA8F;AAC9F,uCAAuC;AAGvC,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD;4FAC4F;AAC5F,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,4DAA4D,CAAC,CAAC;IACpI,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAsB;IACjD,QAAQ,EAAE,QAAQ;IAElB;0DACsD;IACtD,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI;QAC5B,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC5D,OAAO,cAAc,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;IACxF,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI;QAC1C,MAAM,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,qBAAqB,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;CACF,CAAC"}

package/dist/agent/channels/github-origin-codec.d.ts

@@ -0,0 +1,7 @@
+import type { UnifiedWakeOrigin, WakeOriginCodec } from "@open-everywhere/core/agent/adapter-api.js";
+type GitHubOrigin = Extract<UnifiedWakeOrigin, {
+    platform: "github";
+}>;
+export declare const githubWakeOriginCodec: WakeOriginCodec<GitHubOrigin>;
+export {};
+//# sourceMappingURL=github-origin-codec.d.ts.map

package/dist/agent/channels/github-origin-codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-origin-codec.d.ts","sourceRoot":"","sources":["../../../agent/channels/github-origin-codec.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAErG,KAAK,YAAY,GAAG,OAAO,CAAC,iBAAiB,EAAE;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC,CAAC;AAMvE,eAAO,MAAM,qBAAqB,EAAE,eAAe,CAAC,YAAY,CAqB/D,CAAC"}

package/dist/agent/channels/github-origin-codec.js

@@ -0,0 +1,36 @@
+// The GitHub UnifiedWakeOrigin codec — MOVED VERBATIM out of core's
+// channels/wake-origin-codecs.ts (OPE-114 stage 4). STORED-DATA COMPATIBILITY IS THE CONTRACT:
+// a GitHub origin is JSON-serialised into the durable operational store and fail-closed
+// re-validated on read, so every behaviour here is frozen by core's
+// scripts/wake-origin-fixtures-test.ts (run from the app root with this bundle's boot wiring —
+// scripts/wake-origin-fixtures-boot.ts). Validator tolerances (typeof-only optional checks, extra
+// unknown fields) are LOAD-BEARING for rows already on disk — never tighten them here.
+//
+// The `UnifiedWakeOrigin` TYPE union (including its github arm) stays in core — it is the wire
+// schema for stored rows; only the codec BEHAVIOUR lives in the bundle, registered by
+// registerGithubProvider() (../register.ts).
+/** COLON-FREE by construction (a task windowId is `[^:]+` — core channels/window-key.ts): any colon
+ *  in a raw surface id is folded to `_`, deterministically, so spawn + ingress agree on identity. */
+const noColon = (s) => s.replace(/:/g, "_");
+export const githubWakeOriginCodec = {
+    validate: (o) => typeof o.owner === "string" &&
+        o.owner.length > 0 &&
+        typeof o.repo === "string" &&
+        o.repo.length > 0 &&
+        typeof o.issueNumber === "number" &&
+        Number.isFinite(o.issueNumber) &&
+        o.issueNumber > 0 &&
+        (o.installationId === undefined || typeof o.installationId === "number"),
+    threadRef: (origin) => ({ channelKey: noColon(`github/${origin.owner}/${origin.repo}`), threadKey: String(origin.issueNumber) }),
+    // The container and the thread coincide (an issue IS its own thread) ⇒ always thread-scoped.
+    isThreadScoped: () => true,
+    containerId: (origin) => `${origin.owner}/${origin.repo}`,
+    // NO `placementRef` AND NO `carryPlacement`, AND THAT ABSENCE IS THE DECLARATION (OPE-1826). A
+    // GitHub reply is a comment appended to the issue timeline, and the issue IS the thread key above —
+    // there is no "where inside it" left to name, so two origins that pass `sameUnifiedConversation`
+    // cannot disagree about placement. `installationId` is not a counter-example: it selects the
+    // credential the post mints under, never where the post lands. The position is recorded, and held
+    // to account against the live registry, by the `origin-placement-carry` row in core's
+    // identity/surface-parity.ts.
+};
+//# sourceMappingURL=github-origin-codec.js.map

package/dist/agent/channels/github-origin-codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-origin-codec.js","sourceRoot":"","sources":["../../../agent/channels/github-origin-codec.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,+FAA+F;AAC/F,wFAAwF;AACxF,oEAAoE;AACpE,+FAA+F;AAC/F,kGAAkG;AAClG,uFAAuF;AACvF,EAAE;AACF,+FAA+F;AAC/F,sFAAsF;AACtF,6CAA6C;AAM7C;qGACqG;AACrG,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAClE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CACd,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAClB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACjB,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;QAC9B,CAAC,CAAC,WAAW,GAAG,CAAC;QACjB,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC;IAC1E,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;IAChI,6FAA6F;IAC7F,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;IAC1B,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE;IACzD,+FAA+F;IAC/F,oGAAoG;IACpG,iGAAiG;IACjG,6FAA6F;IAC7F,kGAAkG;IAClG,sFAAsF;IACtF,8BAA8B;CAC/B,CAAC"}