@open-everywhere/provider-github 0.0.0-stage → 0.1.0

package/dist/agent/provider-events.js

@@ -0,0 +1,112 @@
+// GITHUB's event inventory (OPE-1612). See the core module's header
+// (packages/core/agent/routines/provider-events.ts) for what the three routing states mean.
+//
+// Every `event` name below is a row of GitHub's own "Webhook events and payloads" index, which the
+// `doc` field cites. The scope column is what `routines/github-normalizer.ts` proves: the `tenant`
+// step is the repo OWNER and the `container` step is `owner/name` on EVERY row, so the rows below
+// list only what each event adds BELOW the container — that is the part that varies, and the part a
+// routine can address about the thing that happened.
+//
+// 🔴 THE `entity` STEP IS THE SUBJECT `normalizeGithubEvent` FOUND, and the chain it searches
+// (`pull_request` → `issue` → `check_run` → `release` → `workflow_run`) is why `push`,
+// `check_suite` and `workflow_job` are envelope-only: their subject object is under a key that chain
+// does not name, so nothing below the repo is proven. That is a real gap, not a vendor limit, and
+// the notes say so. `installation` is a different case and is `none`, not `envelope`: it names no
+// repository at all, so the read-grant check refuses every delivery and nothing can ever fire.
+//
+// 🔴 THIS LIST IS REVIEWED, NOT EXHAUSTIVE. GitHub's index carries far more events than the rows
+// below — `installation_repositories`, `star`, `fork`, `deployment_status` and many more. A row
+// reaches this file when somebody read the event and decided what a routine could do with it. So an
+// ABSENT event means "nobody has reviewed it here", never "the vendor does not send it"; adding one
+// is a doc read plus a routing decision, not a guess.
+export const GITHUB_PROVIDER_EVENTS = {
+    source: "github",
+    doc: "https://docs.github.com/en/webhooks/webhook-events-and-payloads",
+    events: [
+        {
+            event: "issues",
+            routing: "mapped",
+            match: [],
+            scope: ["entity"],
+            note: "an issue was opened, closed, labelled, assigned…; the entity step is the issue number, so the fire re-fetches the issue itself",
+        },
+        {
+            event: "issue_comment",
+            routing: "mapped",
+            match: [],
+            scope: ["entity", "sub"],
+            note: "a comment on an issue or on a pull request's timeline; the sub step is the comment id",
+        },
+        {
+            event: "pull_request",
+            routing: "mapped",
+            match: [],
+            scope: ["entity"],
+            note: "a pull request was opened, synchronised, merged…; the entity step is the pull-request number",
+        },
+        {
+            event: "pull_request_review",
+            routing: "mapped",
+            match: [],
+            scope: ["entity"],
+            note: "a review was submitted, edited or dismissed; the review itself is not addressable — the payload names it `review`, not `comment`",
+        },
+        {
+            event: "pull_request_review_comment",
+            routing: "mapped",
+            match: [],
+            scope: ["entity", "sub"],
+            note: "an inline comment on a line of a pull request's diff; the sub step is the comment id",
+        },
+        {
+            event: "push",
+            routing: "envelope",
+            match: [],
+            scope: [],
+            note: "commits were pushed to a ref; a push has no entity to fetch, and the ref is not mapped — a routine can match the repo and the sender only",
+        },
+        {
+            event: "check_run",
+            routing: "mapped",
+            match: [],
+            scope: ["entity"],
+            note: "one check's state changed; the entity step is GitHub's opaque run id, so it narrows a subscription but is not re-fetchable",
+        },
+        {
+            event: "check_suite",
+            routing: "envelope",
+            match: [],
+            scope: [],
+            note: "a whole suite of checks completed; unmapped — the payload's subject sits under `check_suite`, which the normalizer's subject chain does not name",
+        },
+        {
+            event: "workflow_run",
+            routing: "mapped",
+            match: ["branch", "status", "conclusion", "workflow"],
+            scope: ["entity"],
+            note: "an Actions run started or finished; the four keys are what makes `a red build on our main` expressible — `.scope.container == \"acme/web\" and .fields.conclusion == \"failure\" and .fields.branch == \"main\"`. The container clause is REQUIRED, not decoration: a github subscription that narrows by nothing is refused at create time",
+        },
+        {
+            event: "workflow_job",
+            routing: "envelope",
+            match: [],
+            scope: [],
+            note: "one job inside an Actions run changed state; unmapped — `workflow_run` is the run-level event and carries the same conclusion for the whole run",
+        },
+        {
+            event: "release",
+            routing: "mapped",
+            match: [],
+            scope: ["entity"],
+            note: "a release was published or edited; the entity step is GitHub's opaque release id, so it narrows a subscription but is not re-fetchable",
+        },
+        {
+            event: "installation",
+            routing: "none",
+            match: [],
+            scope: [],
+            note: "the App was installed, suspended or removed; the normalizer accepts it, but the payload names `repositories` and never `repository`, so it proves NO container step and the read-grant check refuses every delivery fail-closed — nothing can ever fire. The self-registering install leg reads it instead",
+        },
+    ],
+};
+//# sourceMappingURL=provider-events.js.map

package/dist/agent/provider-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-events.js","sourceRoot":"","sources":["../../agent/provider-events.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,4FAA4F;AAC5F,EAAE;AACF,mGAAmG;AACnG,mGAAmG;AACnG,kGAAkG;AAClG,oGAAoG;AACpG,qDAAqD;AACrD,EAAE;AACF,8FAA8F;AAC9F,uFAAuF;AACvF,qGAAqG;AACrG,kGAAkG;AAClG,kGAAkG;AAClG,+FAA+F;AAC/F,EAAE;AACF,iGAAiG;AACjG,gGAAgG;AAChG,oGAAoG;AACpG,oGAAoG;AACpG,sDAAsD;AAItD,MAAM,CAAC,MAAM,sBAAsB,GAA6B;IAC9D,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,iEAAiE;IACtE,MAAM,EAAE;QACN;YACE,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,CAAC,QAAQ,CAAC;YACjB,IAAI,EAAE,gIAAgI;SACvI;QACD;YACE,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;YACxB,IAAI,EAAE,uFAAuF;SAC9F;QACD;YACE,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,CAAC,QAAQ,CAAC;YACjB,IAAI,EAAE,8FAA8F;SACrG;QACD;YACE,KAAK,EAAE,qBAAqB;YAC5B,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,CAAC,QAAQ,CAAC;YACjB,IAAI,EAAE,kIAAkI;SACzI;QACD;YACE,KAAK,EAAE,6BAA6B;YACpC,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;YACxB,IAAI,EAAE,sFAAsF;SAC7F;QACD;YACE,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,UAAU;YACnB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,2IAA2I;SAClJ;QACD;YACE,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,CAAC,QAAQ,CAAC;YACjB,IAAI,EAAE,4HAA4H;SACnI;QACD;YACE,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,UAAU;YACnB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,kJAAkJ;SACzJ;QACD;YACE,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,CAAC;YACrD,KAAK,EAAE,CAAC,QAAQ,CAAC;YACjB,IAAI,EAAE,6UAA6U;SACpV;QACD;YACE,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,UAAU;YACnB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,iJAAiJ;SACxJ;QACD;YACE,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,CAAC,QAAQ,CAAC;YACjB,IAAI,EAAE,wIAAwI;SAC/I;QACD;YACE,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,MAAM;YACf,KAAK,EAAE,EAAE;YACT,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,4SAA4S;SACnT;KACF;CACF,CAAC"}

package/dist/agent/register.d.ts

@@ -0,0 +1,4 @@
+/** Perform ALL of the github bundle's chat-surface registrations. Idempotent (each register call
+ *  replaces); cheap and side-effect-free beyond the registry writes. */
+export declare function registerGithubProvider(): void;
+//# sourceMappingURL=register.d.ts.map

package/dist/agent/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../agent/register.ts"],"names":[],"mappings":"AAiEA;wEACwE;AACxE,wBAAgB,sBAAsB,IAAI,IAAI,CA8D7C"}

package/dist/agent/register.js

@@ -0,0 +1,116 @@
+// registerGithubProvider — the ONE boot entry of @open-everywhere/provider-github. The app's
+// adapter-wiring module (agent/lib/register-adapters.ts) imports this STATICALLY and calls it once
+// at boot; every seam the github bundle implements registers here and nowhere else. Static imports
+// only: eve bundles the agent definition and its whole import graph into one rolldown chunk — a
+// literal dynamic import() code-splits and trips eve's "expected one authored module" invariant.
+//
+// SCOPE — CHAT SURFACE ONLY. The github bundle takes the conversational surface (channels/github.ts
+// + the ambient supervisor + identity + post arm). The SCM subsystem STAYS IN CORE by doctrine (the
+// single SCM implementation until a second SCM needs the abstraction — docs/extending/adapter-model.md):
+// the githubEntityAdapter (scm/issue-actions.ts) and every PR/SCM tool (open_pull_request,
+// subscribe_pr, checkout_repo, list_repos, add_label, assign, …) plus the config-repo PR mechanism
+// (credentials/config-pr-github.ts) is NOT part
+// of this bundle — they register from core exactly as before.
+//
+// What github registers (and what it deliberately does NOT):
+//   • identity mapper        — bindGitHub (chat-surface plane; channels/github-identity.ts)
+//   • capability manifest    — { midTurnPost: true, reactions: true, closingProseDropped: true }:
+//                              the arm mints its own installation token and posts/edits/reacts on the
+//                              issue/PR timeline itself, so every mid-turn verb runs through `reply` /
+//                              `edit_reply` / `react` rather than a host-side supervisor post (OPE-811,
+//                              OPE-862)
+//   • post arm               — githubPostArm (mid-turn + unified-reply installation-token comment,
+//                              editMessage, react, + redrive)
+//   • wake-origin codec      — the stored-data github arm (channels/github-origin-codec.ts)
+//   • read adapter           — githubReadAdapter (channels/github-read.ts, OPE-958): the issue-or-PR
+//                              conversation for `read_channel` and a PR review thread for
+//                              `read_thread`, on the brokered read-scoped token. The READ grain is
+//                              the conversation, not the repo — a repo timeline is not a room
+//                              anybody wrote in
+//   • memory backing         — the github MemoryProvider + its connector-memory capability
+//                              (agent/memory/memory.ts). MOVED here from core at OPE-390: a
+//                              connector-owned backing belongs to the package that owns the
+//                              connector; core keeps only the first-party postgres/sqlite ones.
+//   • surface message ops    — githubMessageOps (postText/editMessage; OPE-899): the stop
+//                              acknowledgement's transport (turn-anchor.ts's `postSurfaceText`).
+//                              No postFiles (no file-attach API) and no setReaction (no raised hand
+//                              in GitHub's fixed reaction set) — channels/github-message-ops.ts.
+import { registerIdentityMapper, registerCapabilityManifest, registerSurfaceParity, registerProviderEvents, registerReactionSurface, registerPostArm, registerWakeOriginCodec, registerProviderDocs, registerReadAdapter, registerSeatCatchUp, registerWebhookVerifier, registerSurfaceMessageOps, } from "@open-everywhere/core/agent/adapter-api.js";
+import { PROVIDER_DOCS } from "./docs-generated.js";
+import { GITHUB_SURFACE_PARITY } from "./surface-parity.js";
+import { GITHUB_PROVIDER_EVENTS } from "./provider-events.js";
+import { registerGithubOps } from "./ops.js";
+import { registerGitHubMemory, declareGitHubMemoryCapability } from "./memory/memory.js";
+import { bindGitHub } from "./channels/github-identity.js";
+import { githubPostArm } from "./channels/github-post-arm.js";
+import { githubWakeOriginCodec } from "./channels/github-origin-codec.js";
+import { githubWebhookVerifier } from "./channels/github-webhook-verifier.js";
+import { githubReadAdapter } from "./channels/github-read.js";
+import { githubSeatCatchUpFetch, GITHUB_TIMESTAMP_PRECISION_MS } from "./channels/github-catch-up.js";
+import { githubMessageOps } from "./channels/github-message-ops.js";
+/** Perform ALL of the github bundle's chat-surface registrations. Idempotent (each register call
+ *  replaces); cheap and side-effect-free beyond the registry writes. */
+export function registerGithubProvider() {
+    registerIdentityMapper("github", bindGitHub);
+    // Reply surface (OPE-811): mid-turn post is the arm's own installation-token issue/PR-timeline
+    // comment (githubPostArm.dispatchReply) — no eve proactive helper needed ⇒ midTurnPost true.
+    // reactions (OPE-862): the arm's `react` member posts to GitHub's issue-reactions endpoint
+    // (mapping the model's bare emoji name onto GitHub's fixed content enum) ⇒ true.
+    // closingProseDropped (OPE-811): a container-supervisor turn runs the message-tool-only gate
+    // live, so its turn-final text is dropped and `reply` is the only route out.
+    registerCapabilityManifest("github", { midTurnPost: true, reactions: true, closingProseDropped: true });
+    // The OPE-1499 parity ledger: every capability the chat-surface contract names, answered
+    // `supported` or `{ unsupported: "<reason>" }`. Gates nothing at runtime — `lint:surface-parity`
+    // reds on an unanswered row, and the contract's §7.1/§7.1.1/§7.2 tables are generated from it.
+    registerSurfaceParity("github", GITHUB_SURFACE_PARITY);
+    // The OPE-1612 event inventory: every vendor event that could wake a routine, and how far the
+    // normalizer plane carries each one. Gates nothing at runtime — `lint:provider-events` reds a
+    // bundle that declares none or that promises a match key the normalizer does not declare, and
+    // the manual's inventory table is generated from it.
+    registerProviderEvents("github", GITHUB_PROVIDER_EVENTS);
+    registerPostArm(githubPostArm);
+    registerWakeOriginCodec("github", githubWakeOriginCodec);
+    // Read plane (OPE-958): the sixth surface's arm of the uniform chat read. It serves the SEAT's
+    // `read_channel` / `read_thread` and — under the domain's repo grant — the worker's
+    // `read_work_channel` / `read_work_thread`, because both run the same neutral engine over this
+    // one adapter.
+    registerReadAdapter(githubReadAdapter);
+    // THE SEAT CATCH-UP FETCH (OPE-1726): the timeline comments this issue/PR collected since the
+    // seat's last wake. Core's shared path applies the bounds, the admission policy and the cap.
+    // The surface DECLARES the unit its own message stamps carry, and core widens both catch-up
+    // bounds by it (OPE-1847). A wrong or missing unit bounds the seat out of its own window.
+    registerSeatCatchUp("github", githubSeatCatchUpFetch, { timestampPrecisionMs: GITHUB_TIMESTAMP_PRECISION_MS });
+    // Surface message ops (OPE-899): postText/editMessage over the SAME issue/PR-timeline comment
+    // transport the post arm uses, so the stop acknowledgement (turn-anchor.ts's `postSurfaceText`)
+    // now has a place to land on GitHub. No `postFiles` (no attach-a-file-to-a-comment API) and no
+    // `setReaction` (GitHub's fixed 8-value reaction set has no raised hand) — see
+    // channels/github-message-ops.ts's header.
+    registerSurfaceMessageOps(githubMessageOps);
+    // REACTION-FEEDBACK INGEST (OPE-1502) — a POLL, not a delivery: GitHub pushes no reaction webhook,
+    // so the front reads the reactions on the agent's own comments when a delivery names their
+    // conversation (channels/github-reaction-feedback.ts).
+    registerReactionSurface("github");
+    // Webhook-verifier plane (OPE-164): GitHub's `x-hub-signature-256` scheme, so a GENERIC hook can
+    // declare `source: "github"` and be verified the way GitHub signs. Changes no existing route —
+    // the native github webhook path keeps its own inline gate.
+    registerWebhookVerifier(githubWebhookVerifier);
+    // Shipped-manual plane (OPE-138): this bundle's own setup runbook (docs/deploy/surfaces/github.md,
+    // compiled into ./docs-generated.ts because docs/ is not on disk at runtime). De-select the bundle
+    // and the module leaves the import graph; registerProviderDocs re-checks the selection gate anyway.
+    registerProviderDocs("github", PROVIDER_DOCS);
+    // Ops plane (OPE-495): the telemetry credential-presence probe. Split into ./ops.js so the
+    // STANDALONE ops MCP entry (repo-root scripts/ops-mcp.ts, which serves preflight/quickstart with
+    // no agent boot) registers it without pulling the whole channel graph — the same split slack and
+    // teams use.
+    registerGithubOps();
+    // The MEMORY backing (OPE-390). Two calls on purpose:
+    //   • registerGitHubMemory() wires the live provider off the GitHub App plane and is a no-op
+    //     (false) when no App is configured — a deployment that never uses git-backed memory pays
+    //     nothing and never resolves the "github" provider id.
+    //   • declareGitHubMemoryCapability() runs REGARDLESS, because the prefetch invariant is a
+    //     CONFIG check: a silo reaching past its domain's repo grants must go red at config load on
+    //     a deployment whose App plane happens to be unconfigured too, not go quiet.
+    if (!registerGitHubMemory())
+        declareGitHubMemoryCapability();
+}
+//# sourceMappingURL=register.js.map

package/dist/agent/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../agent/register.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,mGAAmG;AACnG,mGAAmG;AACnG,gGAAgG;AAChG,iGAAiG;AACjG,EAAE;AACF,oGAAoG;AACpG,oGAAoG;AACpG,yGAAyG;AACzG,2FAA2F;AAC3F,mGAAmG;AACnG,gDAAgD;AAChD,8DAA8D;AAC9D,EAAE;AACF,6DAA6D;AAC7D,4FAA4F;AAC5F,kGAAkG;AAClG,sGAAsG;AACtG,uGAAuG;AACvG,wGAAwG;AACxG,wCAAwC;AACxC,mGAAmG;AACnG,8DAA8D;AAC9D,4FAA4F;AAC5F,qGAAqG;AACrG,0FAA0F;AAC1F,mGAAmG;AACnG,8FAA8F;AAC9F,gDAAgD;AAChD,2FAA2F;AAC3F,4FAA4F;AAC5F,4FAA4F;AAC5F,gGAAgG;AAChG,0FAA0F;AAC1F,iGAAiG;AACjG,oGAAoG;AACpG,iGAAiG;AAEjG,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,eAAe,EACf,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AACtG,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEpE;wEACwE;AACxE,MAAM,UAAU,sBAAsB;IACpC,sBAAsB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7C,+FAA+F;IAC/F,6FAA6F;IAC7F,2FAA2F;IAC3F,iFAAiF;IACjF,6FAA6F;IAC7F,6EAA6E;IAC7E,0BAA0B,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;IACxG,yFAAyF;IACzF,iGAAiG;IACjG,+FAA+F;IAC/F,qBAAqB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACvD,8FAA8F;IAC9F,8FAA8F;IAC9F,8FAA8F;IAC9F,qDAAqD;IACrD,sBAAsB,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IACzD,eAAe,CAAC,aAAa,CAAC,CAAC;IAC/B,uBAAuB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACzD,+FAA+F;IAC/F,oFAAoF;IACpF,+FAA+F;IAC/F,eAAe;IACf,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IACvC,8FAA8F;IAC9F,6FAA6F;IAC7F,4FAA4F;IAC5F,0FAA0F;IAC1F,mBAAmB,CAAC,QAAQ,EAAE,sBAAsB,EAAE,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,CAAC,CAAC;IAC/G,8FAA8F;IAC9F,gGAAgG;IAChG,+FAA+F;IAC/F,+EAA+E;IAC/E,2CAA2C;IAC3C,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;IAC5C,mGAAmG;IACnG,2FAA2F;IAC3F,uDAAuD;IACvD,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,iGAAiG;IACjG,+FAA+F;IAC/F,4DAA4D;IAC5D,uBAAuB,CAAC,qBAAqB,CAAC,CAAC;IAC/C,mGAAmG;IACnG,mGAAmG;IACnG,oGAAoG;IACpG,oBAAoB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAC9C,2FAA2F;IAC3F,iGAAiG;IACjG,iGAAiG;IACjG,aAAa;IACb,iBAAiB,EAAE,CAAC;IAEpB,sDAAsD;IACtD,6FAA6F;IAC7F,8FAA8F;IAC9F,2DAA2D;IAC3D,2FAA2F;IAC3F,gGAAgG;IAChG,iFAAiF;IACjF,IAAI,CAAC,oBAAoB,EAAE;QAAE,6BAA6B,EAAE,CAAC;AAC/D,CAAC"}

package/dist/agent/surface-parity.d.ts

@@ -0,0 +1,3 @@
+import type { SurfaceParityDeclaration } from "@open-everywhere/core/agent/adapter-api.js";
+export declare const GITHUB_SURFACE_PARITY: SurfaceParityDeclaration;
+//# sourceMappingURL=surface-parity.d.ts.map

package/dist/agent/surface-parity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface-parity.d.ts","sourceRoot":"","sources":["../../agent/surface-parity.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAE3F,eAAO,MAAM,qBAAqB,EAAE,wBA0GnC,CAAC"}

package/dist/agent/surface-parity.js

@@ -0,0 +1,110 @@
+// GITHUB's surface-parity declaration (OPE-1499). See the core module's header
+// (packages/core/agent/identity/surface-parity.ts) for what the three cell shapes mean.
+//
+// GitHub is a TICKETING surface. A repo holds issues and pull requests, not chat rooms, so the
+// three cross-container verbs and the DM family are absent for a structural reason rather than an
+// unbuilt one — and that distinction is what the reasons below carry.
+export const GITHUB_SURFACE_PARITY = {
+    // --- registration seams (§7.1) ---------------------------------------------------------------
+    "identity-mapper": "supported",
+    "capability-manifest": "supported",
+    "post-arm": "supported",
+    "wake-origin-codec": "supported",
+    "unified-action-plane": {
+        unsupported: "an issue comment is markdown and carries no component plane at all — GitHub offers no tappable button a bot may render into a timeline comment, so there is nothing for a tap route to receive. The bridged approval posts as prose, which the question bridge already renders complete",
+    },
+    "origin-placement-carry": {
+        unsupported: "the placement is INSIDE the conversation identity: a reply is a comment appended to the issue timeline and the issue IS `threadRef`'s thread key, so there is no 'where inside it' left to name",
+    },
+    "read-adapter": "supported",
+    // 🔴 A POLL, not a delivery, and the note says so because the latency is real. GitHub pushes no
+    // reaction webhook at all, so the arm reads the reactions on the agent's own comments when a
+    // later delivery names their conversation. Only an ADD is observable — the route returns the
+    // reactions that exist, never one that was taken away.
+    "reaction-feedback-ingest": { supported: "polled on the next delivery for that conversation — GitHub pushes no reaction webhook, so a removal is never observed" },
+    "ancillary-ops": "supported",
+    "ambient-engagement-seam": "supported",
+    // `githubWakeAddressing` (channels/github-engagement.ts) carries the admission's own `deliver`
+    // verdict to the `github.dispatched` row, so an engaged follow-up reads `thread-follow` and
+    // unowned issue chatter still reads `channel-watch`. The verdict is floored on
+    // `githubEngagedFollowUpReach`, so an engaged issue on a public or unknown-privacy repo, and an
+    // inline review comment, still write `channel-watch` — the engaged door is shut there. The wake
+    // envelope is untouched: the turn is judged, and the silence bar set, exactly as before
+    // (OPE-1752).
+    "engaged-row-promotion": "supported",
+    // The container and the thread coincide — an issue or pull request IS its own thread — so every
+    // wake this surface diverts is thread-scoped and consults ownership.
+    "owned-thread-ingress": "supported",
+    // --- wake legs and conversation shapes -------------------------------------------------------
+    "addressed-leg": "supported",
+    // The ambient supervisor, a different mechanism from the §2.5 registry: the domain opt-in and the
+    // operator vouch decide whether it runs, and the registry has never gated that. The registry does
+    // SUPPRESS it, though — `ambientDelivery` drops a comment in a container `stand_down` marked, and
+    // drops one the native leg now owns (OPE-1501).
+    "ambient-leg": { supported: "the ambient supervisor, not the §2.5 engagement registry" },
+    // `github-catch-up.ts` reads `/issues/:n/comments?since=` for the conversation the seat is woken
+    // on, over the same brokered conversation-read token `read_channel` uses. The vendor's own `since`
+    // filter does the narrowing, so a seat that woke a minute ago pays for a near-empty page.
+    "seat-catch-up": "supported",
+    // The supervisor wake fills the slot with ONE host-composed issue/PR title line, and pours it
+    // through the core seam (github-supervisor.ts). One line is still a pour: a `members-only` domain
+    // must get the same answer here as it gets on the catch-up read beside it.
+    // 🔴 BARE, NOT `{ supported: "…" }` — a noted cell is exempt from the overclaim arm, and this
+    // surface is half of the OPE-1800 class the arm exists to catch.
+    "seat-context-admission": "supported",
+    // A GitHub comment carries no component plane at all — there is no button to tap and no route for
+    // a tap to arrive on. See the roster row for what that costs and where it does NOT cost anything.
+    "approval-card": { unsupported: "an issue/PR comment carries no component plane, so there is no button to render and no route for a tap. A governed act that takes the venue walk is redirected to a card-capable room in the SAME domain, or refused when the domain holds none. The paths OUTSIDE that walk do not: the spend checkpoint (spend/checkpoint.ts `requireSessionContinuation`) fails OPEN here and records the crossing in an audit row instead" },
+    // THE TRACE ARRIVES EVEN THOUGH THE BUTTON CANNOT (OPE-1854). A judge-lifted act posts its
+    // notice here as a plain issue or pull-request comment through the shared road (`postJudgeLiftNotice`), on this
+    // surface's own `SurfaceMessageOps` transport. It carries the overrule as an INSTRUCTION in
+    // words, with the action id a reviewer finds the act by, because no tap can land here.
+    // 🔴 BARE, NOT `{ supported: "…" }`. A noted cell is exempt from the overclaim arm, and the
+    // arm is the point: drop this bundle's text transport and the notice silently stops arriving.
+    "judge-lift-notice": "supported",
+    "name-drop-mention": { unsupported: "not built yet — the ambient supervisor already reads every comment, so a name-drop match adds no wake" },
+    // 🔴 EVERY WAKE LEG ADMITS `created` ONLY, and that is the narrower true claim. The delivery DOES
+    // reach OE code — `wrapRoute` runs the fan-out, the installation leg and the reaction poll on an
+    // edited comment like any other — but no leg that can start a turn admits one: eve's route
+    // dispatches `issue_comment`/`pull_request_review_comment` with `action: "created"`,
+    // `extractGitHubAmbientEvent` reads the same created-only shape, and `parseGitHubStopComment`
+    // agrees.
+    "message-edit-wake": { unsupported: "every wake leg admits `action: \"created\"` only — eve's route, the ambient extractor and the stop leg each refuse an edited comment" },
+    // A review thread on a pull request (§4.6.1).
+    threads: "supported",
+    // A STANDING room (§4.7.1's sense), not §4.5's read_channel container — GitHub has the latter and
+    // `read_channel` is supported below. Every GitHub container is one issue or pull request, so it
+    // exists because somebody filed work and is about that work.
+    rooms: { unsupported: "no standing container — every GitHub container is one issue or pull request" },
+    dm: { unsupported: "no DM plane — GitHub carries no person-to-person message channel" },
+    mpim: { unsupported: "no DM plane — GitHub carries no person-to-person message channel" },
+    // --- core verbs (§7.2) -----------------------------------------------------------------------
+    reply: "supported",
+    edit_reply: "supported",
+    react: "supported",
+    no_reply: "supported",
+    read_channel: "supported",
+    read_thread: "supported",
+    // The work-search adapter is CORE-resident and ungated (packages/core/agent/scm/github-search.ts,
+    // `registerCoreWorkSearchAdapter`), not registered from this bundle — but the corpus is GitHub's.
+    search: { supported: "the core-resident adapter (`scm/github-search.ts`), registered ungated" },
+    // NOT a structural absence, and the reason matters: the transport exists (this bundle registers
+    // `SurfaceMessageOps`, and `approvals/chat-post.ts` posts through it). What refuses is the closed
+    // `RESOURCE_TYPES` table in `access/resource-grant.ts`, which carries no row for this surface, so
+    // no `channel` grant can be minted and `chatWriteMount` never arms the tool.
+    post_message: { unsupported: "not built yet — no `channel` row in `access/resource-grant.ts` — OPE-1507" },
+    dm_person: { unsupported: "no DM plane — GitHub carries no person-to-person message channel (§4.7.2)" },
+    set_dm_delivery: { unsupported: "no DM plane — the verb mounts only inside a 1:1 DM (§4.7.2)" },
+    // GitHub sends no webhook for a reaction at all, so the trigger is a comment whose ENTIRE body is
+    // the word `stop` — one thing only, never a magic string competing with real messages (§4.8).
+    stop: { supported: "a comment whose entire body is `stop` — GitHub sends no reaction webhook" },
+    // `react` IS wired, so this is not "no reaction primitive". GitHub's reaction set is the fixed
+    // eight (+1, -1, laugh, confused, heart, hooray, rocket, eyes) and none of them is a raised hand,
+    // so there is no glyph to place — github-message-ops.ts offers no `setReaction` for that reason
+    // rather than faking one against the wrong emoji.
+    ack_stop_glyph: { unsupported: "vendor limit — GitHub's fixed eight reactions carry no raised hand, so there is no ✋ to place" },
+    ack_cancel_note: "supported",
+    stand_down: { supported: "marks the issue/pull-request row; refuses when no row exists" },
+    post_file: { unsupported: "vendor limit — a GitHub comment carries no file-attachment API" },
+};
+//# sourceMappingURL=surface-parity.js.map

package/dist/agent/surface-parity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface-parity.js","sourceRoot":"","sources":["../../agent/surface-parity.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,wFAAwF;AACxF,EAAE;AACF,+FAA+F;AAC/F,kGAAkG;AAClG,sEAAsE;AAItE,MAAM,CAAC,MAAM,qBAAqB,GAA6B;IAC7D,gGAAgG;IAChG,iBAAiB,EAAE,WAAW;IAC9B,qBAAqB,EAAE,WAAW;IAClC,UAAU,EAAE,WAAW;IACvB,mBAAmB,EAAE,WAAW;IAChC,sBAAsB,EAAE;QACtB,WAAW,EACT,yRAAyR;KAC5R;IACD,wBAAwB,EAAE;QACxB,WAAW,EACT,iMAAiM;KACpM;IACD,cAAc,EAAE,WAAW;IAC3B,gGAAgG;IAChG,6FAA6F;IAC7F,6FAA6F;IAC7F,uDAAuD;IACvD,0BAA0B,EAAE,EAAE,SAAS,EAAE,uHAAuH,EAAE;IAClK,eAAe,EAAE,WAAW;IAC5B,yBAAyB,EAAE,WAAW;IACtC,+FAA+F;IAC/F,4FAA4F;IAC5F,+EAA+E;IAC/E,gGAAgG;IAChG,gGAAgG;IAChG,wFAAwF;IACxF,cAAc;IACd,uBAAuB,EAAE,WAAW;IACpC,gGAAgG;IAChG,qEAAqE;IACrE,sBAAsB,EAAE,WAAW;IAEnC,gGAAgG;IAChG,eAAe,EAAE,WAAW;IAC5B,kGAAkG;IAClG,kGAAkG;IAClG,kGAAkG;IAClG,gDAAgD;IAChD,aAAa,EAAE,EAAE,SAAS,EAAE,0DAA0D,EAAE;IACxF,iGAAiG;IACjG,mGAAmG;IACnG,0FAA0F;IAC1F,eAAe,EAAE,WAAW;IAC5B,8FAA8F;IAC9F,kGAAkG;IAClG,2EAA2E;IAC3E,8FAA8F;IAC9F,iEAAiE;IACjE,wBAAwB,EAAE,WAAW;IACrC,kGAAkG;IAClG,kGAAkG;IAClG,eAAe,EAAE,EAAE,WAAW,EAAE,+ZAA+Z,EAAE;IACjc,2FAA2F;IAC3F,gHAAgH;IAChH,4FAA4F;IAC5F,uFAAuF;IACvF,4FAA4F;IAC5F,8FAA8F;IAC9F,mBAAmB,EAAE,WAAW;IAChC,mBAAmB,EAAE,EAAE,WAAW,EAAE,uGAAuG,EAAE;IAC7I,kGAAkG;IAClG,iGAAiG;IACjG,2FAA2F;IAC3F,qFAAqF;IACrF,8FAA8F;IAC9F,UAAU;IACV,mBAAmB,EAAE,EAAE,WAAW,EAAE,sIAAsI,EAAE;IAC5K,8CAA8C;IAC9C,OAAO,EAAE,WAAW;IACpB,kGAAkG;IAClG,gGAAgG;IAChG,6DAA6D;IAC7D,KAAK,EAAE,EAAE,WAAW,EAAE,6EAA6E,EAAE;IACrG,EAAE,EAAE,EAAE,WAAW,EAAE,kEAAkE,EAAE;IACvF,IAAI,EAAE,EAAE,WAAW,EAAE,kEAAkE,EAAE;IAEzF,gGAAgG;IAChG,KAAK,EAAE,WAAW;IAClB,UAAU,EAAE,WAAW;IACvB,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,WAAW;IACrB,YAAY,EAAE,WAAW;IACzB,WAAW,EAAE,WAAW;IACxB,kGAAkG;IAClG,kGAAkG;IAClG,MAAM,EAAE,EAAE,SAAS,EAAE,wEAAwE,EAAE;IAC/F,gGAAgG;IAChG,kGAAkG;IAClG,kGAAkG;IAClG,6EAA6E;IAC7E,YAAY,EAAE,EAAE,WAAW,EAAE,2EAA2E,EAAE;IAC1G,SAAS,EAAE,EAAE,WAAW,EAAE,2EAA2E,EAAE;IACvG,eAAe,EAAE,EAAE,WAAW,EAAE,6DAA6D,EAAE;IAC/F,kGAAkG;IAClG,8FAA8F;IAC9F,IAAI,EAAE,EAAE,SAAS,EAAE,0EAA0E,EAAE;IAC/F,+FAA+F;IAC/F,kGAAkG;IAClG,gGAAgG;IAChG,kDAAkD;IAClD,cAAc,EAAE,EAAE,WAAW,EAAE,+FAA+F,EAAE;IAChI,eAAe,EAAE,WAAW;IAC5B,UAAU,EAAE,EAAE,SAAS,EAAE,8DAA8D,EAAE;IACzF,SAAS,EAAE,EAAE,WAAW,EAAE,gEAAgE,EAAE;CAC7F,CAAC"}

package/package.json

@@ -1,6 +1,158 @@
 {
   "name": "@open-everywhere/provider-github",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "Open Everywhere GitHub provider — GitHub issues and pull requests as a conversational wake surface.",
+  "keywords": [
+    "agent",
+    "github",
+    "github-app",
+    "chatops",
+    "eve"
+  ],
+  "license": "Apache-2.0",
+  "type": "module",
+  "homepage": "https://github.com/open-everywhere/open-everywhere/tree/main/packages/providers/github",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/open-everywhere/open-everywhere.git",
+    "directory": "packages/providers/github"
+  },
+  "bugs": {
+    "url": "https://github.com/open-everywhere/open-everywhere/issues"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "agent",
+    "dist",
+    "tsconfig.json",
+    "tsconfig.build.json",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "exports": {
+    "./package.json": "./package.json",
+    "./agent/channels/github-catch-up.js": {
+      "types": "./dist/agent/channels/github-catch-up.d.ts",
+      "default": "./dist/agent/channels/github-catch-up.js"
+    },
+    "./agent/channels/github-engagement.js": {
+      "types": "./dist/agent/channels/github-engagement.d.ts",
+      "default": "./dist/agent/channels/github-engagement.js"
+    },
+    "./agent/channels/github-identity.js": {
+      "types": "./dist/agent/channels/github-identity.d.ts",
+      "default": "./dist/agent/channels/github-identity.js"
+    },
+    "./agent/channels/github-installations.js": {
+      "types": "./dist/agent/channels/github-installations.d.ts",
+      "default": "./dist/agent/channels/github-installations.js"
+    },
+    "./agent/channels/github-message-ops.js": {
+      "types": "./dist/agent/channels/github-message-ops.d.ts",
+      "default": "./dist/agent/channels/github-message-ops.js"
+    },
+    "./agent/channels/github-origin-codec.js": {
+      "types": "./dist/agent/channels/github-origin-codec.d.ts",
+      "default": "./dist/agent/channels/github-origin-codec.js"
+    },
+    "./agent/channels/github-post-arm.js": {
+      "types": "./dist/agent/channels/github-post-arm.d.ts",
+      "default": "./dist/agent/channels/github-post-arm.js"
+    },
+    "./agent/channels/github-reaction-feedback.js": {
+      "types": "./dist/agent/channels/github-reaction-feedback.d.ts",
+      "default": "./dist/agent/channels/github-reaction-feedback.js"
+    },
+    "./agent/channels/github-reaction-scope.js": {
+      "types": "./dist/agent/channels/github-reaction-scope.d.ts",
+      "default": "./dist/agent/channels/github-reaction-scope.js"
+    },
+    "./agent/channels/github-read.js": {
+      "types": "./dist/agent/channels/github-read.d.ts",
+      "default": "./dist/agent/channels/github-read.js"
+    },
+    "./agent/channels/github-stop.js": {
+      "types": "./dist/agent/channels/github-stop.d.ts",
+      "default": "./dist/agent/channels/github-stop.js"
+    },
+    "./agent/channels/github-supervisor.js": {
+      "types": "./dist/agent/channels/github-supervisor.d.ts",
+      "default": "./dist/agent/channels/github-supervisor.js"
+    },
+    "./agent/channels/github-webhook-verifier.js": {
+      "types": "./dist/agent/channels/github-webhook-verifier.d.ts",
+      "default": "./dist/agent/channels/github-webhook-verifier.js"
+    },
+    "./agent/channels/github.js": {
+      "types": "./dist/agent/channels/github.d.ts",
+      "default": "./dist/agent/channels/github.js"
+    },
+    "./agent/contributions.js": {
+      "types": "./dist/agent/contributions.d.ts",
+      "default": "./dist/agent/contributions.js"
+    },
+    "./agent/docs-generated.js": {
+      "types": "./dist/agent/docs-generated.d.ts",
+      "default": "./dist/agent/docs-generated.js"
+    },
+    "./agent/memory/memory.js": {
+      "types": "./dist/agent/memory/memory.d.ts",
+      "default": "./dist/agent/memory/memory.js"
+    },
+    "./agent/ops.js": {
+      "types": "./dist/agent/ops.d.ts",
+      "default": "./dist/agent/ops.js"
+    },
+    "./agent/provider-events.js": {
+      "types": "./dist/agent/provider-events.d.ts",
+      "default": "./dist/agent/provider-events.js"
+    },
+    "./agent/register.js": {
+      "types": "./dist/agent/register.d.ts",
+      "default": "./dist/agent/register.js"
+    },
+    "./agent/surface-parity.js": {
+      "types": "./dist/agent/surface-parity.d.ts",
+      "default": "./dist/agent/surface-parity.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "npm run test:chain",
+    "test:chain": "npm run test:github-supervisor && npm run test:github-identity && npm run test:github-post-arm && npm run test:github-installations && npm run test:github-webhook-verifier && npm run test:github-memory && npm run test:github-stop && npm run test:github-engagement && npm run test:github-reaction-feedback && npm run test:github-read && npm run test:github-mint-scope && npm run test:github-message-ops && npm run test:github-wake-failure-audit && npm run test:github-rate-limit && npm run test:github-write-seam && npm run test:github-reaction-scope",
+    "test:github-wake-failure-audit": "NODE_NO_WARNINGS=1 tsx scripts/github-wake-failure-audit-test.ts",
+    "test:github-rate-limit": "NODE_NO_WARNINGS=1 tsx scripts/github-rate-limit-test.ts",
+    "test:github-write-seam": "NODE_NO_WARNINGS=1 tsx scripts/github-write-seam-test.ts",
+    "test:github-read": "NODE_NO_WARNINGS=1 tsx scripts/github-read-test.ts",
+    "test:github-message-ops": "NODE_NO_WARNINGS=1 tsx scripts/github-message-ops-test.ts",
+    "test:github-supervisor": "NODE_NO_WARNINGS=1 tsx scripts/github-supervisor-test.ts",
+    "test:github-identity": "NODE_NO_WARNINGS=1 tsx scripts/github-identity-test.ts",
+    "test:github-post-arm": "NODE_NO_WARNINGS=1 tsx scripts/github-post-arm-test.ts",
+    "test:github-installations": "NODE_NO_WARNINGS=1 tsx scripts/github-installations-test.ts",
+    "test:github-webhook-verifier": "NODE_NO_WARNINGS=1 tsx scripts/github-webhook-verifier-test.ts",
+    "test:github-memory": "NODE_NO_WARNINGS=1 tsx scripts/github-memory-test.ts",
+    "test:github-stop": "NODE_NO_WARNINGS=1 tsx scripts/github-stop-test.ts",
+    "test:github-reaction-feedback": "NODE_NO_WARNINGS=1 tsx scripts/github-reaction-feedback-test.ts",
+    "test:github-engagement": "NODE_NO_WARNINGS=1 tsx scripts/github-engagement-test.ts",
+    "test:github-mint-scope": "NODE_NO_WARNINGS=1 tsx scripts/github-mint-scope-test.ts",
+    "test:github-reaction-scope": "NODE_NO_WARNINGS=1 tsx scripts/github-reaction-scope-test.ts"
+  },
+  "dependencies": {
+    "@open-everywhere/core": "0.1.0",
+    "zod": "4.5.4"
+  },
+  "peerDependencies": {
+    "eve": "0.54.3"
+  },
+  "devDependencies": {
+    "@types/node": "latest",
+    "tsx": "latest",
+    "typescript": "latest"
+  }
+}

package/tsconfig.build.json

@@ -0,0 +1,22 @@
+{
+  // PUBLISH BUILD (OPE-406). See packages/core/tsconfig.build.json for the full rationale: the
+  // sibling tsconfig.json stays noEmit (it is the typecheck gate and covers scripts/** too); this
+  // config emits ONLY the published surface (agent/**) into dist/, because a registry install
+  // cannot execute raw TypeScript and "eve build" evaluates the authored agent modules.
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "noEmit": false,
+    // Incremental: these run from every pre-hook (pretypecheck/pretest/prebuild), so a no-op
+    // rebuild has to be near-free or the gate chain pays a full tsc on every invocation.
+    "incremental": true,
+    // OUTSIDE outDir on purpose: a tsbuildinfo left in dist/ gets swept up by the files
+    // allowlist and PUBLISHED (caught by the tarball listing, 2026-08-12).
+    "tsBuildInfoFile": "./.tsbuildinfo",
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true,
+    "outDir": "dist",
+    "rootDir": "."
+  },
+  "include": ["agent/**/*.ts"]
+}

package/tsconfig.json

@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2023",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "lib": ["ES2023"],
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "noEmit": true,
+    "resolveJsonModule": true,
+    "types": ["node"]
+  },
+  "include": ["agent/**/*.ts", "scripts/**/*.ts"]
+}