@ubiquity-os/plugin-sdk 1.0.10 → 1.1.0

package/dist/constants.js

@@ -1,3 +1,34 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/constants.ts
+var constants_exports = {};
+__export(constants_exports, {
+  BOT_USER_ID: () => BOT_USER_ID,
+  CONFIG_FULL_PATH: () => CONFIG_FULL_PATH,
+  CONFIG_ORG_REPO: () => CONFIG_ORG_REPO,
+  DEV_CONFIG_FULL_PATH: () => DEV_CONFIG_FULL_PATH,
+  KERNEL_APP_ID: () => KERNEL_APP_ID,
+  KERNEL_PUBLIC_KEY: () => KERNEL_PUBLIC_KEY
+});
+module.exports = __toCommonJS(constants_exports);
+
 // src/types/config.ts
 var CONFIG_FULL_PATH = ".github/.ubiquity-os.config.yml";
 var DEV_CONFIG_FULL_PATH = ".github/.ubiquity-os.config.dev.yml";
@@ -16,11 +47,12 @@ JQIDAQAB
 `;
 var KERNEL_APP_ID = 975031;
 var BOT_USER_ID = 178941584;
-export {
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
   BOT_USER_ID,
   CONFIG_FULL_PATH,
   CONFIG_ORG_REPO,
   DEV_CONFIG_FULL_PATH,
   KERNEL_APP_ID,
   KERNEL_PUBLIC_KEY
-};
+});

package/dist/constants.mjs

@@ -0,0 +1,26 @@
+// src/types/config.ts
+var CONFIG_FULL_PATH = ".github/.ubiquity-os.config.yml";
+var DEV_CONFIG_FULL_PATH = ".github/.ubiquity-os.config.dev.yml";
+var CONFIG_ORG_REPO = ".ubiquity-os";
+
+// src/constants.ts
+var KERNEL_PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs96DOU+JqM8SyNXOB6u3
+uBKIFiyrcST/LZTYN6y7LeJlyCuGPqSDrWCfjU9Ph5PLf9TWiNmeM8DGaOpwEFC7
+U3NRxOSglo4plnQ5zRwIHHXvxyK400sQP2oISXymISuBQWjEIqkC9DybQrKwNzf+
+I0JHWPqmwMIw26UvVOtXGOOWBqTkk+N2+/9f8eDIJP5QQVwwszc8s1rXOsLMlVIf
+wShw7GO4E2jyK8TSJKpyjV8eb1JJMDwFhPiRrtZfQJUtDf2mV/67shQww61BH2Y/
+Plnalo58kWIbkqZoq1yJrL5sFb73osM5+vADTXVn79bkvea7W19nSkdMiarYt4Hq
+JQIDAQAB
+-----END PUBLIC KEY-----
+`;
+var KERNEL_APP_ID = 975031;
+var BOT_USER_ID = 178941584;
+export {
+  BOT_USER_ID,
+  CONFIG_FULL_PATH,
+  CONFIG_ORG_REPO,
+  DEV_CONFIG_FULL_PATH,
+  KERNEL_APP_ID,
+  KERNEL_PUBLIC_KEY
+};

package/dist/index.d.mts

@@ -0,0 +1,63 @@
+import * as hono_types from 'hono/types';
+import { EmitterWebhookEventName, EmitterWebhookEvent } from '@octokit/webhooks';
+import { TAnySchema } from '@sinclair/typebox';
+import { Logs, LogLevel, LogReturn } from '@ubiquity-os/ubiquity-os-logger';
+import { Hono } from 'hono';
+import { customOctokit } from './octokit.mjs';
+import { Manifest } from './manifest.mjs';
+import '@octokit/core/dist-types/types';
+import '@octokit/plugin-paginate-graphql';
+import '@octokit/plugin-rest-endpoint-methods';
+import '@octokit/plugin-paginate-rest';
+import '@octokit/request-error';
+import '@octokit/core';
+
+interface Context<TConfig = unknown, TEnv = unknown, TCommand = unknown, TSupportedEvents extends EmitterWebhookEventName = EmitterWebhookEventName> {
+    eventName: TSupportedEvents;
+    payload: {
+        [K in TSupportedEvents]: K extends EmitterWebhookEventName ? EmitterWebhookEvent<K> : never;
+    }[TSupportedEvents]["payload"];
+    command: TCommand | null;
+    octokit: InstanceType<typeof customOctokit>;
+    config: TConfig;
+    env: TEnv;
+    logger: Logs;
+}
+
+type Return = Record<string, unknown> | undefined | void;
+type HandlerReturn = Promise<Return> | Return;
+
+interface Options$1 {
+    kernelPublicKey?: string;
+    logLevel?: LogLevel;
+    postCommentOnError?: boolean;
+    settingsSchema?: TAnySchema;
+    envSchema?: TAnySchema;
+    commandSchema?: TAnySchema;
+    /**
+     * @deprecated This disables signature verification - only for local development
+     */
+    bypassSignatureVerification?: boolean;
+}
+declare function createPlugin<TConfig = unknown, TEnv = unknown, TCommand = unknown, TSupportedEvents extends EmitterWebhookEventName = EmitterWebhookEventName>(handler: (context: Context<TConfig, TEnv, TCommand, TSupportedEvents>) => HandlerReturn, manifest: Manifest, options?: Options$1): Hono<hono_types.BlankEnv, hono_types.BlankSchema, "/">;
+
+interface Options {
+    logLevel?: LogLevel;
+    postCommentOnError?: boolean;
+    settingsSchema?: TAnySchema;
+    envSchema?: TAnySchema;
+    commandSchema?: TAnySchema;
+    kernelPublicKey?: string;
+    /**
+     * @deprecated This disables signature verification - only for local development
+     */
+    bypassSignatureVerification?: boolean;
+}
+declare function createActionsPlugin<TConfig = unknown, TEnv = unknown, TCommand = unknown, TSupportedEvents extends EmitterWebhookEventName = EmitterWebhookEventName>(handler: (context: Context<TConfig, TEnv, TCommand, TSupportedEvents>) => HandlerReturn, options?: Options): Promise<void>;
+
+/**
+ * Posts a comment on a GitHub issue if the issue exists in the context payload, embedding structured metadata to it.
+ */
+declare function postComment(context: Context, message: LogReturn): Promise<void>;
+
+export { type Context, createActionsPlugin, createPlugin, postComment };

package/dist/index.d.ts

@@ -3,51 +3,57 @@ import { EmitterWebhookEventName, EmitterWebhookEvent } from '@octokit/webhooks'
 import { TAnySchema } from '@sinclair/typebox';
 import { Logs, LogLevel, LogReturn } from '@ubiquity-os/ubiquity-os-logger';
 import { Hono } from 'hono';
-import * as _octokit_core_dist_types_types from '@octokit/core/dist-types/types';
-import * as _octokit_plugin_paginate_graphql from '@octokit/plugin-paginate-graphql';
-import * as _octokit_plugin_rest_endpoint_methods from '@octokit/plugin-rest-endpoint-methods';
-import * as _octokit_plugin_paginate_rest from '@octokit/plugin-paginate-rest';
-import * as _octokit_request_error from '@octokit/request-error';
-import { Octokit } from '@octokit/core';
+import { customOctokit } from './octokit.js';
 import { Manifest } from './manifest.js';
+import '@octokit/core/dist-types/types';
+import '@octokit/plugin-paginate-graphql';
+import '@octokit/plugin-rest-endpoint-methods';
+import '@octokit/plugin-paginate-rest';
+import '@octokit/request-error';
+import '@octokit/core';
 
-declare const customOctokit: typeof Octokit & _octokit_core_dist_types_types.Constructor<{
-    retry: {
-        retryRequest: (error: _octokit_request_error.RequestError, retries: number, retryAfter: number) => _octokit_request_error.RequestError;
-    };
-} & {
-    paginate: _octokit_plugin_paginate_rest.PaginateInterface;
-} & _octokit_plugin_rest_endpoint_methods.Api & _octokit_plugin_paginate_graphql.paginateGraphQLInterface>;
-
-interface Context<TConfig = unknown, TEnv = unknown, TSupportedEvents extends EmitterWebhookEventName = EmitterWebhookEventName> {
+interface Context<TConfig = unknown, TEnv = unknown, TCommand = unknown, TSupportedEvents extends EmitterWebhookEventName = EmitterWebhookEventName> {
     eventName: TSupportedEvents;
     payload: {
         [K in TSupportedEvents]: K extends EmitterWebhookEventName ? EmitterWebhookEvent<K> : never;
     }[TSupportedEvents]["payload"];
+    command: TCommand | null;
     octokit: InstanceType<typeof customOctokit>;
     config: TConfig;
     env: TEnv;
     logger: Logs;
 }
 
+type Return = Record<string, unknown> | undefined | void;
+type HandlerReturn = Promise<Return> | Return;
+
 interface Options$1 {
     kernelPublicKey?: string;
     logLevel?: LogLevel;
     postCommentOnError?: boolean;
     settingsSchema?: TAnySchema;
     envSchema?: TAnySchema;
+    commandSchema?: TAnySchema;
+    /**
+     * @deprecated This disables signature verification - only for local development
+     */
     bypassSignatureVerification?: boolean;
 }
-declare function createPlugin<TConfig = unknown, TEnv = unknown, TSupportedEvents extends EmitterWebhookEventName = EmitterWebhookEventName>(handler: (context: Context<TConfig, TEnv, TSupportedEvents>) => Promise<Record<string, unknown> | undefined>, manifest: Manifest, options?: Options$1): Hono<hono_types.BlankEnv, hono_types.BlankSchema, "/">;
+declare function createPlugin<TConfig = unknown, TEnv = unknown, TCommand = unknown, TSupportedEvents extends EmitterWebhookEventName = EmitterWebhookEventName>(handler: (context: Context<TConfig, TEnv, TCommand, TSupportedEvents>) => HandlerReturn, manifest: Manifest, options?: Options$1): Hono<hono_types.BlankEnv, hono_types.BlankSchema, "/">;
 
 interface Options {
     logLevel?: LogLevel;
     postCommentOnError?: boolean;
     settingsSchema?: TAnySchema;
     envSchema?: TAnySchema;
+    commandSchema?: TAnySchema;
     kernelPublicKey?: string;
+    /**
+     * @deprecated This disables signature verification - only for local development
+     */
+    bypassSignatureVerification?: boolean;
 }
-declare function createActionsPlugin<TConfig = unknown, TEnv = unknown, TSupportedEvents extends EmitterWebhookEventName = EmitterWebhookEventName>(handler: (context: Context<TConfig, TEnv, TSupportedEvents>) => Promise<Record<string, unknown> | undefined>, options?: Options): Promise<void>;
+declare function createActionsPlugin<TConfig = unknown, TEnv = unknown, TCommand = unknown, TSupportedEvents extends EmitterWebhookEventName = EmitterWebhookEventName>(handler: (context: Context<TConfig, TEnv, TCommand, TSupportedEvents>) => HandlerReturn, options?: Options): Promise<void>;
 
 /**
  * Posts a comment on a GitHub issue if the issue exists in the context payload, embedding structured metadata to it.

package/dist/index.js

@@ -1,10 +1,48 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var src_exports = {};
+__export(src_exports, {
+  createActionsPlugin: () => createActionsPlugin,
+  createPlugin: () => createPlugin,
+  postComment: () => postComment
+});
+module.exports = __toCommonJS(src_exports);
+
 // src/server.ts
-import { Type as T } from "@sinclair/typebox";
-import { Value } from "@sinclair/typebox/value";
-import { LOG_LEVEL, LogReturn, Logs } from "@ubiquity-os/ubiquity-os-logger";
-import { Hono } from "hono";
-import { env as honoEnv } from "hono/adapter";
-import { HTTPException } from "hono/http-exception";
+var import_typebox = require("@sinclair/typebox");
+var import_value = require("@sinclair/typebox/value");
+var import_ubiquity_os_logger = require("@ubiquity-os/ubiquity-os-logger");
+var import_hono = require("hono");
+var import_adapter = require("hono/adapter");
+var import_http_exception = require("hono/http-exception");
 
 // src/util.ts
 function sanitizeMetadata(obj) {
@@ -60,12 +98,12 @@ JQIDAQAB
 `;
 
 // src/octokit.ts
-import { Octokit } from "@octokit/core";
-import { paginateRest } from "@octokit/plugin-paginate-rest";
-import { restEndpointMethods } from "@octokit/plugin-rest-endpoint-methods";
-import { retry } from "@octokit/plugin-retry";
-import { throttling } from "@octokit/plugin-throttling";
-import { paginateGraphQL } from "@octokit/plugin-paginate-graphql";
+var import_core = require("@octokit/core");
+var import_plugin_paginate_rest = require("@octokit/plugin-paginate-rest");
+var import_plugin_rest_endpoint_methods = require("@octokit/plugin-rest-endpoint-methods");
+var import_plugin_retry = require("@octokit/plugin-retry");
+var import_plugin_throttling = require("@octokit/plugin-throttling");
+var import_plugin_paginate_graphql = require("@octokit/plugin-paginate-graphql");
 var defaultOptions = {
   throttle: {
     onAbuseLimit: (retryAfter, options, octokit) => {
@@ -82,7 +120,7 @@ var defaultOptions = {
     }
   }
 };
-var customOctokit = Octokit.plugin(throttling, retry, paginateRest, restEndpointMethods, paginateGraphQL).defaults((instanceOptions) => {
+var customOctokit = import_core.Octokit.plugin(import_plugin_throttling.throttling, import_plugin_retry.retry, import_plugin_paginate_rest.paginateRest, import_plugin_rest_endpoint_methods.restEndpointMethods, import_plugin_paginate_graphql.paginateGraphQL).defaults((instanceOptions) => {
   return { ...defaultOptions, ...instanceOptions };
 });
 
@@ -95,7 +133,8 @@ async function verifySignature(publicKeyPem, inputs, signature) {
       eventPayload: inputs.eventPayload,
       settings: inputs.settings,
       authToken: inputs.authToken,
-      ref: inputs.ref
+      ref: inputs.ref,
+      command: inputs.command
     };
     const pemContents = publicKeyPem.replace("-----BEGIN PUBLIC KEY-----", "").replace("-----END PUBLIC KEY-----", "").trim();
     const binaryDer = Uint8Array.from(atob(pemContents), (c) => c.charCodeAt(0));
@@ -119,88 +158,97 @@ async function verifySignature(publicKeyPem, inputs, signature) {
 }
 
 // src/server.ts
-var inputSchema = T.Object({
-  stateId: T.String(),
-  eventName: T.String(),
-  eventPayload: T.Record(T.String(), T.Any()),
-  authToken: T.String(),
-  settings: T.Record(T.String(), T.Any()),
-  ref: T.String(),
-  signature: T.String(),
-  bypassSignatureVerification: T.Optional(
-    T.Boolean({
-      default: false,
-      description: "Bypass signature verification (caution: only use this if you know what you're doing)"
-    })
-  )
+var inputSchema = import_typebox.Type.Object({
+  stateId: import_typebox.Type.String(),
+  eventName: import_typebox.Type.String(),
+  eventPayload: import_typebox.Type.Record(import_typebox.Type.String(), import_typebox.Type.Any()),
+  command: import_typebox.Type.Union([import_typebox.Type.Null(), import_typebox.Type.Object({ name: import_typebox.Type.String(), parameters: import_typebox.Type.Unknown() })]),
+  authToken: import_typebox.Type.String(),
+  settings: import_typebox.Type.Record(import_typebox.Type.String(), import_typebox.Type.Any()),
+  ref: import_typebox.Type.String(),
+  signature: import_typebox.Type.String()
 });
 function createPlugin(handler, manifest, options) {
   const pluginOptions = {
     kernelPublicKey: options?.kernelPublicKey ?? KERNEL_PUBLIC_KEY,
-    logLevel: options?.logLevel ?? LOG_LEVEL.INFO,
+    logLevel: options?.logLevel ?? import_ubiquity_os_logger.LOG_LEVEL.INFO,
     postCommentOnError: options?.postCommentOnError ?? true,
     settingsSchema: options?.settingsSchema,
-    envSchema: options?.envSchema
+    envSchema: options?.envSchema,
+    commandSchema: options?.commandSchema,
+    bypassSignatureVerification: options?.bypassSignatureVerification || false
   };
-  const app = new Hono();
+  const app = new import_hono.Hono();
   app.get("/manifest.json", (ctx) => {
     return ctx.json(manifest);
   });
   app.post("/", async (ctx) => {
     if (ctx.req.header("content-type") !== "application/json") {
-      throw new HTTPException(400, { message: "Content-Type must be application/json" });
+      throw new import_http_exception.HTTPException(400, { message: "Content-Type must be application/json" });
     }
     const body = await ctx.req.json();
-    const inputSchemaErrors = [...Value.Errors(inputSchema, body)];
+    const inputSchemaErrors = [...import_value.Value.Errors(inputSchema, body)];
     if (inputSchemaErrors.length) {
-      console.dir(inputSchemaErrors, { depth: null });
-      throw new HTTPException(400, { message: "Invalid body" });
+      console.log(inputSchemaErrors, { depth: null });
+      throw new import_http_exception.HTTPException(400, { message: "Invalid body" });
     }
-    const inputs = Value.Decode(inputSchema, body);
+    const inputs = import_value.Value.Decode(inputSchema, body);
     const signature = inputs.signature;
-    if (!options?.bypassSignatureVerification && !await verifySignature(pluginOptions.kernelPublicKey, inputs, signature)) {
-      throw new HTTPException(400, { message: "Invalid signature" });
+    if (!pluginOptions.bypassSignatureVerification && !await verifySignature(pluginOptions.kernelPublicKey, inputs, signature)) {
+      throw new import_http_exception.HTTPException(400, { message: "Invalid signature" });
     }
     let config2;
     if (pluginOptions.settingsSchema) {
       try {
-        config2 = Value.Decode(pluginOptions.settingsSchema, Value.Default(pluginOptions.settingsSchema, inputs.settings));
+        config2 = import_value.Value.Decode(pluginOptions.settingsSchema, import_value.Value.Default(pluginOptions.settingsSchema, inputs.settings));
       } catch (e) {
-        console.dir(...Value.Errors(pluginOptions.settingsSchema, inputs.settings), { depth: null });
+        console.log(...import_value.Value.Errors(pluginOptions.settingsSchema, inputs.settings), { depth: null });
         throw e;
       }
     } else {
       config2 = inputs.settings;
     }
     let env;
-    const honoEnvironment = honoEnv(ctx);
+    const honoEnvironment = (0, import_adapter.env)(ctx);
     if (pluginOptions.envSchema) {
       try {
-        env = Value.Decode(pluginOptions.envSchema, Value.Default(pluginOptions.envSchema, honoEnvironment));
+        env = import_value.Value.Decode(pluginOptions.envSchema, import_value.Value.Default(pluginOptions.envSchema, honoEnvironment));
       } catch (e) {
-        console.dir(...Value.Errors(pluginOptions.envSchema, honoEnvironment), { depth: null });
+        console.log(...import_value.Value.Errors(pluginOptions.envSchema, honoEnvironment), { depth: null });
         throw e;
       }
     } else {
       env = ctx.env;
     }
+    let command = null;
+    if (inputs.command && pluginOptions.commandSchema) {
+      try {
+        command = import_value.Value.Decode(pluginOptions.commandSchema, import_value.Value.Default(pluginOptions.commandSchema, inputs.command));
+      } catch (e) {
+        console.log(...import_value.Value.Errors(pluginOptions.commandSchema, inputs.command), { depth: null });
+        throw e;
+      }
+    } else if (inputs.command) {
+      command = inputs.command;
+    }
     const context2 = {
       eventName: inputs.eventName,
       payload: inputs.eventPayload,
+      command,
       octokit: new customOctokit({ auth: inputs.authToken }),
       config: config2,
       env,
-      logger: new Logs(pluginOptions.logLevel)
+      logger: new import_ubiquity_os_logger.Logs(pluginOptions.logLevel)
     };
     try {
       const result = await handler(context2);
-      return ctx.json({ stateId: inputs.stateId, output: result });
+      return ctx.json({ stateId: inputs.stateId, output: result ?? {} });
     } catch (error) {
       console.error(error);
       let loggerError;
       if (error instanceof Error) {
         loggerError = context2.logger.error(`Error: ${error}`, { error });
-      } else if (error instanceof LogReturn) {
+      } else if (error instanceof import_ubiquity_os_logger.LogReturn) {
         loggerError = error;
       } else {
         loggerError = context2.logger.error(`Error: ${error}`);
@@ -208,84 +256,116 @@ function createPlugin(handler, manifest, options) {
       if (pluginOptions.postCommentOnError && loggerError) {
         await postComment(context2, loggerError);
       }
-      throw new HTTPException(500, { message: "Unexpected error" });
+      throw new import_http_exception.HTTPException(500, { message: "Unexpected error" });
     }
   });
   return app;
 }
 
 // src/actions.ts
-import * as core from "@actions/core";
-import * as github from "@actions/github";
-import { Type as T2 } from "@sinclair/typebox";
-import { Value as Value2 } from "@sinclair/typebox/value";
-import { LOG_LEVEL as LOG_LEVEL2, LogReturn as LogReturn2, Logs as Logs2 } from "@ubiquity-os/ubiquity-os-logger";
-import { config } from "dotenv";
-config();
-var inputSchema2 = T2.Object({
-  stateId: T2.String(),
-  eventName: T2.String(),
-  eventPayload: T2.String(),
-  authToken: T2.String(),
-  settings: T2.String(),
-  ref: T2.String(),
-  signature: T2.String()
+var core = __toESM(require("@actions/core"));
+var github = __toESM(require("@actions/github"));
+var import_typebox4 = require("@sinclair/typebox");
+var import_value3 = require("@sinclair/typebox/value");
+var import_ubiquity_os_logger2 = require("@ubiquity-os/ubiquity-os-logger");
+var import_dotenv = require("dotenv");
+
+// src/types/util.ts
+var import_typebox2 = require("@sinclair/typebox");
+var import_value2 = require("@sinclair/typebox/value");
+function jsonType(type) {
+  return import_typebox2.Type.Transform(import_typebox2.Type.String()).Decode((value) => {
+    const parsed = JSON.parse(value);
+    return import_value2.Value.Decode(type, import_value2.Value.Default(type, parsed));
+  }).Encode((value) => JSON.stringify(value));
+}
+
+// src/types/command.ts
+var import_typebox3 = require("@sinclair/typebox");
+var commandCallSchema = import_typebox3.Type.Union([import_typebox3.Type.Null(), import_typebox3.Type.Object({ name: import_typebox3.Type.String(), parameters: import_typebox3.Type.Unknown() })]);
+
+// src/actions.ts
+(0, import_dotenv.config)();
+var inputSchema2 = import_typebox4.Type.Object({
+  stateId: import_typebox4.Type.String(),
+  eventName: import_typebox4.Type.String(),
+  eventPayload: jsonType(import_typebox4.Type.Record(import_typebox4.Type.String(), import_typebox4.Type.Any())),
+  command: jsonType(commandCallSchema),
+  authToken: import_typebox4.Type.String(),
+  settings: jsonType(import_typebox4.Type.Record(import_typebox4.Type.String(), import_typebox4.Type.Any())),
+  ref: import_typebox4.Type.String(),
+  signature: import_typebox4.Type.String()
 });
 async function createActionsPlugin(handler, options) {
   const pluginOptions = {
-    logLevel: options?.logLevel ?? LOG_LEVEL2.INFO,
+    logLevel: options?.logLevel ?? import_ubiquity_os_logger2.LOG_LEVEL.INFO,
     postCommentOnError: options?.postCommentOnError ?? true,
     settingsSchema: options?.settingsSchema,
     envSchema: options?.envSchema,
-    kernelPublicKey: options?.kernelPublicKey ?? KERNEL_PUBLIC_KEY
+    commandSchema: options?.commandSchema,
+    kernelPublicKey: options?.kernelPublicKey ?? KERNEL_PUBLIC_KEY,
+    bypassSignatureVerification: options?.bypassSignatureVerification || false
   };
   const pluginGithubToken = process.env.PLUGIN_GITHUB_TOKEN;
   if (!pluginGithubToken) {
     core.setFailed("Error: PLUGIN_GITHUB_TOKEN env is not set");
     return;
   }
+  const body = github.context.payload.inputs;
+  const signature = body.signature;
+  if (!pluginOptions.bypassSignatureVerification && !await verifySignature(pluginOptions.kernelPublicKey, body, signature)) {
+    core.setFailed(`Error: Invalid signature`);
+    return;
+  }
   const inputPayload = github.context.payload.inputs;
-  const inputSchemaErrors = [...Value2.Errors(inputSchema2, inputPayload)];
+  const inputSchemaErrors = [...import_value3.Value.Errors(inputSchema2, inputPayload)];
   if (inputSchemaErrors.length) {
     console.dir(inputSchemaErrors, { depth: null });
     core.setFailed(`Error: Invalid inputs payload: ${inputSchemaErrors.join(",")}`);
     return;
   }
-  const inputs = Value2.Decode(inputSchema2, inputPayload);
-  const signature = inputs.signature;
-  if (!await verifySignature(pluginOptions.kernelPublicKey, inputs, signature)) {
-    core.setFailed(`Error: Invalid signature`);
-    return;
-  }
+  const inputs = import_value3.Value.Decode(inputSchema2, inputPayload);
   let config2;
   if (pluginOptions.settingsSchema) {
     try {
-      config2 = Value2.Decode(pluginOptions.settingsSchema, Value2.Default(pluginOptions.settingsSchema, JSON.parse(inputs.settings)));
+      config2 = import_value3.Value.Decode(pluginOptions.settingsSchema, import_value3.Value.Default(pluginOptions.settingsSchema, inputs.settings));
     } catch (e) {
-      console.dir(...Value2.Errors(pluginOptions.settingsSchema, JSON.parse(inputs.settings)), { depth: null });
+      console.dir(...import_value3.Value.Errors(pluginOptions.settingsSchema, inputs.settings), { depth: null });
       throw e;
     }
   } else {
-    config2 = JSON.parse(inputs.settings);
+    config2 = inputs.settings;
   }
   let env;
   if (pluginOptions.envSchema) {
     try {
-      env = Value2.Decode(pluginOptions.envSchema, Value2.Default(pluginOptions.envSchema, process.env));
+      env = import_value3.Value.Decode(pluginOptions.envSchema, import_value3.Value.Default(pluginOptions.envSchema, process.env));
     } catch (e) {
-      console.dir(...Value2.Errors(pluginOptions.envSchema, process.env), { depth: null });
+      console.dir(...import_value3.Value.Errors(pluginOptions.envSchema, process.env), { depth: null });
       throw e;
     }
   } else {
     env = process.env;
   }
+  let command = null;
+  if (inputs.command && pluginOptions.commandSchema) {
+    try {
+      command = import_value3.Value.Decode(pluginOptions.commandSchema, import_value3.Value.Default(pluginOptions.commandSchema, inputs.command));
+    } catch (e) {
+      console.dir(...import_value3.Value.Errors(pluginOptions.commandSchema, inputs.command), { depth: null });
+      throw e;
+    }
+  } else if (inputs.command) {
+    command = inputs.command;
+  }
   const context2 = {
     eventName: inputs.eventName,
-    payload: JSON.parse(inputs.eventPayload),
+    payload: inputs.eventPayload,
+    command,
     octokit: new customOctokit({ auth: inputs.authToken }),
     config: config2,
     env,
-    logger: new Logs2(pluginOptions.logLevel)
+    logger: new import_ubiquity_os_logger2.Logs(pluginOptions.logLevel)
   };
   try {
     const result = await handler(context2);
@@ -297,7 +377,7 @@ async function createActionsPlugin(handler, options) {
     if (error instanceof Error) {
       core.setFailed(error);
       loggerError = context2.logger.error(`Error: ${error}`, { error });
-    } else if (error instanceof LogReturn2) {
+    } else if (error instanceof import_ubiquity_os_logger2.LogReturn) {
       core.setFailed(error.logMessage.raw);
       loggerError = error;
     } else {
@@ -340,8 +420,9 @@ async function returnDataToKernel(repoToken, stateId, output) {
     }
   });
 }
-export {
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
   createActionsPlugin,
   createPlugin,
   postComment
-};
+});