@urateam/core 0.1.0

package/dist/__tests__/webhook-handler.test.js

@@ -0,0 +1,286 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { createHmac } from "crypto";
+import { createWebhookHandler } from "../webhook/handler.js";
+import { createDb } from "../db/client.js";
+// Helper to generate a valid HMAC signature
+function sign(body, secret) {
+    return createHmac("sha256", secret).update(body).digest("hex");
+}
+// ---------------------------------------------------------------------------
+// Fixtures
+// ---------------------------------------------------------------------------
+const SECRET = "whsec_test_secret";
+const pipelineConfig = {
+    name: "auto-implement",
+    stages: ["triage", "implement", "test", "review"],
+    retry: { maxAttempts: 1, strategy: "fix-and-retry" },
+    review: { requiredApprovals: 1 },
+    prStrategy: "draft",
+};
+const repoConfig = {
+    url: "https://github.com/org/repo",
+    defaultBranch: "main",
+    testCommand: "npm test",
+    buildCommand: "npm run build",
+};
+function stateChangePayload(stateName, labels = ["auto-implement"]) {
+    return {
+        action: "update",
+        type: "Issue",
+        data: {
+            id: "issue-uuid-123",
+            identifier: "LIN-42",
+            title: "Add user search",
+            description: "Implement search functionality",
+            priority: 2,
+            state: { id: "state-uuid", name: stateName },
+            teamId: "team-frontend",
+            labels: labels.map((name) => ({ name })),
+        },
+        updatedFrom: { stateId: "old-state-uuid" },
+    };
+}
+function commentPayload() {
+    return {
+        action: "create",
+        type: "Comment",
+        data: { id: "comment-123", body: "Added a comment" },
+    };
+}
+// ---------------------------------------------------------------------------
+// Mock PipelineRunner
+// ---------------------------------------------------------------------------
+function createMockRunner() {
+    return {
+        start: vi.fn().mockResolvedValue(undefined),
+        resume: vi.fn().mockResolvedValue(undefined),
+        pause: vi.fn().mockResolvedValue(undefined),
+        abort: vi.fn().mockResolvedValue(undefined),
+        isActive: vi.fn().mockReturnValue(false),
+    };
+}
+// ---------------------------------------------------------------------------
+// Test helpers
+// ---------------------------------------------------------------------------
+function buildConfig(runner, overrides) {
+    return {
+        webhookSecret: SECRET,
+        runner: runner,
+        pipelineConfigs: { "auto-implement": pipelineConfig },
+        repoConfigs: { "team-frontend": repoConfig },
+        ...overrides,
+    };
+}
+async function postWebhook(app, body, secret = SECRET) {
+    const rawBody = JSON.stringify(body);
+    const sig = sign(rawBody, secret);
+    return app.request("/webhooks/linear", {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/json",
+            "Linear-Signature": sig,
+        },
+        body: rawBody,
+    });
+}
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+describe("createWebhookHandler", () => {
+    let runner;
+    beforeEach(() => {
+        vi.restoreAllMocks();
+        runner = createMockRunner();
+    });
+    it("returns 401 for invalid signature", async () => {
+        const app = createWebhookHandler(buildConfig(runner));
+        const rawBody = JSON.stringify(stateChangePayload("Todo"));
+        const res = await app.request("/webhooks/linear", {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                "Linear-Signature": "invalid-sig",
+            },
+            body: rawBody,
+        });
+        expect(res.status).toBe(401);
+        const json = await res.json();
+        expect(json.error).toBe("Invalid signature");
+    });
+    it("returns 200 for valid signature with state change and dispatches start", async () => {
+        const app = createWebhookHandler(buildConfig(runner));
+        const res = await postWebhook(app, stateChangePayload("Todo"));
+        expect(res.status).toBe(200);
+        const json = await res.json();
+        expect(json.ok).toBe(true);
+        expect(json.action).toBe("start");
+        expect(json.runQueued).toBe(true);
+        expect(runner.start).toHaveBeenCalledTimes(1);
+    });
+    it("returns 200 for comment webhook (ignored)", async () => {
+        const app = createWebhookHandler(buildConfig(runner));
+        const res = await postWebhook(app, commentPayload());
+        expect(res.status).toBe(200);
+        const json = await res.json();
+        expect(json.ok).toBe(true);
+        expect(runner.start).not.toHaveBeenCalled();
+    });
+    it("returns 200 for unknown state (ignored)", async () => {
+        const app = createWebhookHandler(buildConfig(runner));
+        const res = await postWebhook(app, stateChangePayload("In Progress"));
+        expect(res.status).toBe(200);
+        const json = await res.json();
+        expect(json.ok).toBe(true);
+        expect(runner.start).not.toHaveBeenCalled();
+    });
+    it("deduplicates same webhook within 30s window", async () => {
+        const app = createWebhookHandler(buildConfig(runner));
+        const payload = stateChangePayload("Todo");
+        // First request should dispatch
+        const res1 = await postWebhook(app, payload);
+        const json1 = await res1.json();
+        expect(json1.action).toBe("start");
+        expect(runner.start).toHaveBeenCalledTimes(1);
+        // Second identical request should be deduplicated
+        const res2 = await postWebhook(app, payload);
+        const json2 = await res2.json();
+        expect(json2.deduplicated).toBe(true);
+        expect(runner.start).toHaveBeenCalledTimes(1); // Still 1
+    });
+    it("returns message when no pipeline matches labels", async () => {
+        const app = createWebhookHandler(buildConfig(runner));
+        const res = await postWebhook(app, stateChangePayload("Todo", ["unknown-label"]));
+        expect(res.status).toBe(200);
+        const json = await res.json();
+        expect(json.message).toBe("No pipeline config for labels");
+        expect(runner.start).not.toHaveBeenCalled();
+    });
+    it("returns 422 when no repo mapping found", async () => {
+        const consoleSpy = vi.spyOn(console, "error").mockImplementation(() => { });
+        const config = buildConfig(runner, {
+            repoConfigs: {}, // No repo configs
+        });
+        const app = createWebhookHandler(config);
+        const res = await postWebhook(app, stateChangePayload("Todo"));
+        expect(res.status).toBe(422);
+        const json = await res.json();
+        expect(json.error).toBe("No repo mapping for team/project");
+        expect(json.teamId).toBe("team-frontend");
+        expect(runner.start).not.toHaveBeenCalled();
+        consoleSpy.mockRestore();
+    });
+    it("uses per-team triggerMap from repoConfig when present", async () => {
+        // Team uses "Ready for Dev" instead of default "Todo"
+        const customRepoConfig = {
+            ...repoConfig,
+            triggerMap: { start: "Ready for Dev", resume: "Approved", pause: "On Hold", abort: "Won't Fix" },
+        };
+        const app = createWebhookHandler(buildConfig(runner, { repoConfigs: { "team-frontend": customRepoConfig } }));
+        // Default "Todo" state should NOT trigger start with custom map
+        const resTodo = await postWebhook(app, stateChangePayload("Todo"));
+        const jsonTodo = await resTodo.json();
+        expect(jsonTodo.action).toBeUndefined();
+        expect(runner.start).not.toHaveBeenCalled();
+        // Custom "Ready for Dev" state should trigger start
+        const resCustom = await postWebhook(app, stateChangePayload("Ready for Dev"));
+        const jsonCustom = await resCustom.json();
+        expect(jsonCustom.action).toBe("start");
+        expect(runner.start).toHaveBeenCalledTimes(1);
+    });
+    it("falls back to global triggerMap when repoConfig has none", async () => {
+        // Global override: use "Backlog" as start state
+        const app = createWebhookHandler(buildConfig(runner, {
+            triggerMap: { start: "Backlog", resume: "Approved", pause: "Blocked", abort: "Canceled" },
+        }));
+        // Default "Todo" should NOT trigger start
+        const resTodo = await postWebhook(app, stateChangePayload("Todo"));
+        const jsonTodo = await resTodo.json();
+        expect(jsonTodo.action).toBeUndefined();
+        // Global "Backlog" should trigger start
+        const resBacklog = await postWebhook(app, stateChangePayload("Backlog"));
+        const jsonBacklog = await resBacklog.json();
+        expect(jsonBacklog.action).toBe("start");
+        expect(runner.start).toHaveBeenCalledTimes(1);
+    });
+    // -------------------------------------------------------------------------
+    // DB-backed dedup: restart-survival and multi-instance scenarios
+    // -------------------------------------------------------------------------
+    describe("DB-backed dedup", () => {
+        it("deduplicates within the same handler instance using DB", async () => {
+            const db = await createDb({ connectionString: ":memory:" });
+            const app = createWebhookHandler(buildConfig(runner, { db }));
+            const payload = stateChangePayload("Todo");
+            const res1 = await postWebhook(app, payload);
+            const json1 = await res1.json();
+            expect(json1.action).toBe("start");
+            expect(runner.start).toHaveBeenCalledTimes(1);
+            const res2 = await postWebhook(app, payload);
+            const json2 = await res2.json();
+            expect(json2.deduplicated).toBe(true);
+            expect(runner.start).toHaveBeenCalledTimes(1);
+        });
+        it("survives restart — second handler instance sees dedup state from DB", async () => {
+            // Use a shared in-memory SQLite DB (same connection shared across both handlers)
+            const db = await createDb({ connectionString: ":memory:" });
+            // First "process": handler 1 receives the webhook and stores dedup entry in DB
+            const app1 = createWebhookHandler(buildConfig(runner, { db }));
+            const payload = stateChangePayload("Todo");
+            const res1 = await postWebhook(app1, payload);
+            const json1 = await res1.json();
+            expect(json1.action).toBe("start");
+            expect(runner.start).toHaveBeenCalledTimes(1);
+            // Simulate "restart" — create a brand-new handler (new in-memory DedupSet would be empty,
+            // but DB-backed dedup still has the entry from the first handler)
+            const runner2 = createMockRunner();
+            const app2 = createWebhookHandler(buildConfig(runner2, { db }));
+            const res2 = await postWebhook(app2, payload);
+            const json2 = await res2.json();
+            expect(json2.deduplicated).toBe(true);
+            expect(runner2.start).not.toHaveBeenCalled();
+        });
+        it("provides correct dedup across two concurrent instances sharing the same DB", async () => {
+            // Both instances share the same DB connection (simulates multi-instance with shared Postgres)
+            const db = await createDb({ connectionString: ":memory:" });
+            const runner2 = createMockRunner();
+            const app1 = createWebhookHandler(buildConfig(runner, { db }));
+            const app2 = createWebhookHandler(buildConfig(runner2, { db }));
+            const payload = stateChangePayload("Todo");
+            // Instance 1 processes the webhook
+            const res1 = await postWebhook(app1, payload);
+            const json1 = await res1.json();
+            expect(json1.action).toBe("start");
+            expect(runner.start).toHaveBeenCalledTimes(1);
+            // Instance 2 receives the same webhook — should be deduplicated via shared DB
+            const res2 = await postWebhook(app2, payload);
+            const json2 = await res2.json();
+            expect(json2.deduplicated).toBe(true);
+            expect(runner2.start).not.toHaveBeenCalled();
+        });
+        it("falls back to in-memory dedup when no DB is configured", async () => {
+            // No db option — uses MemoryDedupBackend (existing behavior preserved)
+            const app = createWebhookHandler(buildConfig(runner));
+            const payload = stateChangePayload("Todo");
+            const res1 = await postWebhook(app, payload);
+            const json1 = await res1.json();
+            expect(json1.action).toBe("start");
+            const res2 = await postWebhook(app, payload);
+            const json2 = await res2.json();
+            expect(json2.deduplicated).toBe(true);
+        });
+        it("DB dedup cleanup removes expired entries", async () => {
+            const db = await createDb({ connectionString: ":memory:" });
+            const app = createWebhookHandler(buildConfig(runner, { db }));
+            const payload = stateChangePayload("Todo");
+            const res1 = await postWebhook(app, payload);
+            const json1 = await res1.json();
+            expect(json1.action).toBe("start");
+            expect(runner.start).toHaveBeenCalledTimes(1);
+            // Within the same 30s window, dedup should still work
+            const res2 = await postWebhook(app, payload);
+            const json2 = await res2.json();
+            expect(json2.deduplicated).toBe(true);
+            expect(runner.start).toHaveBeenCalledTimes(1);
+        });
+    });
+});
+//# sourceMappingURL=webhook-handler.test.js.map

package/dist/__tests__/webhook-handler.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-handler.test.js","sourceRoot":"","sources":["../../src/__tests__/webhook-handler.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAG7D,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,4CAA4C;AAC5C,SAAS,IAAI,CAAC,IAAY,EAAE,MAAc;IACxC,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAC9E,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,MAAM,cAAc,GAAmB;IACrC,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC;IACjD,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE;IACpD,MAAM,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE;IAChC,UAAU,EAAE,OAAO;CACpB,CAAC;AAEF,MAAM,UAAU,GAAe;IAC7B,GAAG,EAAE,6BAA6B;IAClC,aAAa,EAAE,MAAM;IACrB,WAAW,EAAE,UAAU;IACvB,YAAY,EAAE,eAAe;CAC9B,CAAC;AAEF,SAAS,kBAAkB,CAAC,SAAiB,EAAE,SAAmB,CAAC,gBAAgB,CAAC;IAClF,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,OAAO;QACb,IAAI,EAAE;YACJ,EAAE,EAAE,gBAAgB;YACpB,UAAU,EAAE,QAAQ;YACpB,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,gCAAgC;YAC7C,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE;YAC5C,MAAM,EAAE,eAAe;YACvB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;SACzC;QACD,WAAW,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,cAAc;IACrB,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,iBAAiB,EAAE;KACrD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAC9E,SAAS,gBAAgB;IACvB,OAAO;QACL,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC3C,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC5C,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC3C,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC;QAC3C,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAC9E,SAAS,WAAW,CAClB,MAA2C,EAC3C,SAAyC;IAEzC,OAAO;QACL,aAAa,EAAE,MAAM;QACrB,MAAM,EAAE,MAAa;QACrB,eAAe,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE;QACrD,WAAW,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE;QAC5C,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAA4C,EAC5C,IAAyB,EACzB,SAAiB,MAAM;IAEvB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE;QACrC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,kBAAkB,EAAE,GAAG;SACxB;QACD,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAC9E,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,MAA2C,CAAC;IAEhD,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,kBAAkB,EAAE,aAAa;aAClC;YACD,IAAI,EAAE,OAAO;SACd,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAE3C,gCAAgC;QAChC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAE9C,kDAAkD;QAClD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,UAAU,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,EAAE;YACjC,WAAW,EAAE,EAAE,EAAE,kBAAkB;SACpC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,UAAU,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,sDAAsD;QACtD,MAAM,gBAAgB,GAAG;YACvB,GAAG,UAAU;YACb,UAAU,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE;SACjG,CAAC;QACF,MAAM,GAAG,GAAG,oBAAoB,CAC9B,WAAW,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAC5E,CAAC;QAEF,gEAAgE;QAChE,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAE5C,oDAAoD;QACpD,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC,eAAe,CAAC,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,gDAAgD;QAChD,MAAM,GAAG,GAAG,oBAAoB,CAC9B,WAAW,CAAC,MAAM,EAAE;YAClB,UAAU,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE;SAC1F,CAAC,CACH,CAAC;QAEF,0CAA0C;QAC1C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QAExC,wCAAwC;QACxC,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QACzE,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,iEAAiE;IACjE,4EAA4E;IAE5E,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAE3C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAE9C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;YACnF,iFAAiF;YACjF,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;YAE5D,+EAA+E;YAC/E,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAE3C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAE9C,0FAA0F;YAC1F,kEAAkE;YAClE,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAEhE,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;YAC1F,8FAA8F;YAC9F,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;YAEnC,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAE3C,mCAAmC;YACnC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAE9C,8EAA8E;YAC9E,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,uEAAuE;YACvE,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAE3C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEnC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAE3C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAE9C,sDAAsD;YACtD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/webhook.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=webhook.test.d.ts.map

package/dist/__tests__/webhook.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/webhook.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/webhook.test.js

@@ -0,0 +1,58 @@
+import { describe, it, expect } from "vitest";
+import { createHmac } from "crypto";
+import { verifyLinearSignature } from "../webhook/signature.js";
+import { parseStateChange } from "../webhook/parser.js";
+import stateChangePayload from "./fixtures/webhook-state-change.json" with { type: "json" };
+import commentPayload from "./fixtures/webhook-comment.json" with { type: "json" };
+// Helper to generate a valid HMAC signature
+function sign(body, secret) {
+    return createHmac("sha256", secret).update(body).digest("hex");
+}
+// ---------------------------------------------------------------------------
+// verifyLinearSignature
+// ---------------------------------------------------------------------------
+describe("verifyLinearSignature", () => {
+    const secret = "whsec_test_secret";
+    const body = JSON.stringify({ type: "Issue", action: "update" });
+    it("returns true for valid signature", () => {
+        const sig = sign(body, secret);
+        expect(verifyLinearSignature(body, sig, secret)).toBe(true);
+    });
+    it("returns false for invalid signature", () => {
+        expect(verifyLinearSignature(body, "bad-signature", secret)).toBe(false);
+    });
+    it("returns false for wrong secret", () => {
+        const sig = sign(body, "wrong-secret");
+        expect(verifyLinearSignature(body, sig, secret)).toBe(false);
+    });
+});
+// ---------------------------------------------------------------------------
+// parseStateChange
+// ---------------------------------------------------------------------------
+describe("parseStateChange", () => {
+    it("extracts issue data from state change webhook", () => {
+        const result = parseStateChange(stateChangePayload);
+        expect(result).not.toBeNull();
+        expect(result.issue.id).toBe("issue-uuid-123");
+        expect(result.issue.identifier).toBe("LIN-42");
+        expect(result.issue.title).toBe("Add user search");
+        expect(result.issue.description).toBe("Implement search functionality");
+        expect(result.issue.priority).toBe(2);
+        expect(result.issue.teamId).toBe("team-frontend");
+        expect(result.issue.labels).toEqual([{ name: "auto-implement" }]);
+        expect(result.newState).toBe("Todo");
+        expect(result.previousState).toBeNull();
+    });
+    it("returns null for comment webhooks", () => {
+        expect(parseStateChange(commentPayload)).toBeNull();
+    });
+    it("returns null for non-update actions", () => {
+        const payload = { ...stateChangePayload, action: "create" };
+        expect(parseStateChange(payload)).toBeNull();
+    });
+    it("returns null when no stateId in updatedFrom", () => {
+        const payload = { ...stateChangePayload, updatedFrom: {} };
+        expect(parseStateChange(payload)).toBeNull();
+    });
+});
+//# sourceMappingURL=webhook.test.js.map

package/dist/__tests__/webhook.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.test.js","sourceRoot":"","sources":["../../src/__tests__/webhook.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,kBAAkB,MAAM,sCAAsC,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAC5F,OAAO,cAAc,MAAM,iCAAiC,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAEnF,4CAA4C;AAC5C,SAAS,IAAI,CAAC,IAAY,EAAE,MAAc;IACxC,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAC9E,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,MAAM,MAAM,GAAG,mBAAmB,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEjE,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,qBAAqB,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,qBAAqB,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QACvC,MAAM,CAAC,qBAAqB,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAC9E,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,CAAC,MAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,CAAC,MAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,CAAC,MAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACzE,MAAM,CAAC,MAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACnD,MAAM,CAAC,MAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,MAAO,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,OAAO,GAAG,EAAE,GAAG,kBAAkB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC5D,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,OAAO,GAAG,EAAE,GAAG,kBAAkB,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;QAC3D,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/db/client.d.ts

@@ -0,0 +1,56 @@
+import { type BetterSQLite3Database } from "drizzle-orm/better-sqlite3";
+import { drizzle as drizzlePg } from "drizzle-orm/postgres-js";
+import { type SQL } from "drizzle-orm";
+import * as schema from "./schema.js";
+declare const fullSchema: typeof schema;
+export type SqliteDb = BetterSQLite3Database<typeof fullSchema>;
+/** Postgres DB typed against the unified schema via any to avoid pg-vs-sqlite column type mismatch. */
+export type PgDb = ReturnType<typeof drizzlePg> & {
+    __driver: "postgres";
+};
+export type Db = SqliteDb | PgDb;
+/**
+ * Escape-hatch type used when passing the Db union to Drizzle query
+ * builders that expect a single concrete driver type. Both SQLite and
+ * Postgres schemas have identical column structures, so the generated
+ * SQL is correct for either driver at runtime.
+ */
+export type AnyDb = any;
+/**
+ * Generates CREATE TABLE statements for both SQLite and Postgres from a single
+ * template, substituting driver-specific types for timestamps and booleans.
+ *
+ * This is the single source of truth for table DDL.
+ * Both drivers use this function — no separate DDL blocks.
+ */
+export declare function getCreateTablesDDL(driver: "sqlite" | "postgres"): string;
+/** Generate SQLite ALTER TABLE statements from the unified migration list. */
+export declare function getMigrateSqlite(): string[];
+/** Generate a Postgres DO $$ ... $$ migration block from the unified migration list. */
+export declare function getMigratePostgres(): string;
+export interface CreateDbOptions {
+    /** Auto-detected from connectionString if not provided. */
+    driver?: "sqlite" | "postgres";
+    /** File path / ":memory:" for SQLite, or connection URL for Postgres. */
+    connectionString: string;
+}
+export declare function createDb(options: CreateDbOptions): Promise<Db>;
+/** Check if a Db instance is backed by Postgres. */
+export declare function isPostgres(db: Db): boolean;
+/**
+ * Returns a SQL expression that formats a crossTimestamp column as 'YYYY-MM-DD'.
+ *
+ * - SQLite:   `date(col, 'unixepoch')` — column is INTEGER epoch seconds
+ * - Postgres: `to_char(col, 'YYYY-MM-DD')` — column is TIMESTAMPTZ
+ */
+export declare function sqlDateGroup(db: Db, col: any): SQL<string>;
+/**
+ * Returns a SQL expression that filters rows where a crossTimestamp column
+ * is at or after `days` days ago.
+ *
+ * - SQLite:   `col >= unixepoch('now', '-N days')` — column is INTEGER epoch seconds
+ * - Postgres: `col >= now() - interval 'N days'` — column is TIMESTAMPTZ
+ */
+export declare function sqlDaysAgoFilter(db: Db, col: any, days: number): SQL;
+export {};
+//# sourceMappingURL=client.d.ts.map

package/dist/db/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/db/client.ts"],"names":[],"mappings":"AACA,OAAO,EAA4B,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAClG,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAO,KAAK,GAAG,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAItC,QAAA,MAAM,UAAU,eAAS,CAAC;AAE1B,MAAM,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC;AAChE,uGAAuG;AACvG,MAAM,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,SAAS,CAAC,GAAG;IAAE,QAAQ,EAAE,UAAU,CAAA;CAAE,CAAC;AAC3E,MAAM,MAAM,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,MAAM,KAAK,GAAG,GAAG,CAAC;AAqCxB;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,MAAM,CAwFxE;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,IAAI,MAAM,EAAE,CAK3C;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,IAAI,MAAM,CAS3C;AAED,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,MAAM,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC/B,yEAAyE;IACzE,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAeD,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,EAAE,CAAC,CA4BpE;AAED,oDAAoD;AACpD,wBAAgB,UAAU,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,CAE1C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAI1D;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,GAAG,GAAG,CAIpE"}

package/dist/db/client.js

@@ -0,0 +1,201 @@
+import Database from "better-sqlite3";
+import { drizzle as drizzleSqlite } from "drizzle-orm/better-sqlite3";
+import { drizzle as drizzlePg } from "drizzle-orm/postgres-js";
+import { sql } from "drizzle-orm";
+import postgres from "postgres";
+import * as schema from "./schema.js";
+import { _setSchemaDriver } from "./schema.js";
+import { runMigrationsPostgres } from "./migrator.js";
+const fullSchema = schema;
+/**
+ * Single unified migration list.
+ * SQLite and Postgres migration statements are auto-generated from this list.
+ * To add a new column to an existing table: add ONE entry here.
+ */
+const MIGRATION_COLUMNS = [
+    // BEC-87: auto-recover transient failures
+    { table: "pipeline_runs", column: "retry_count", sqliteType: "INTEGER NOT NULL DEFAULT 0", pgType: "INTEGER NOT NULL DEFAULT 0" },
+    // BEC-84: review-feedback support
+    { table: "pipeline_runs", column: "run_type", sqliteType: "TEXT NOT NULL DEFAULT 'standard'", pgType: "TEXT NOT NULL DEFAULT 'standard'" },
+    { table: "pipeline_runs", column: "parent_run_id", sqliteType: "TEXT", pgType: "TEXT" },
+    { table: "pipeline_runs", column: "feedback_context", sqliteType: "TEXT", pgType: "TEXT" },
+    // BEC-95: auto-merge audit log
+    { table: "pipeline_runs", column: "auto_merged", sqliteType: "INTEGER", pgType: "BOOLEAN" },
+    { table: "pipeline_runs", column: "auto_merge_reason", sqliteType: "TEXT", pgType: "TEXT" },
+    // BEC-94: auto-commit quality metric
+    { table: "pipeline_runs", column: "auto_committed", sqliteType: "INTEGER", pgType: "BOOLEAN" },
+];
+/**
+ * Generates CREATE TABLE statements for both SQLite and Postgres from a single
+ * template, substituting driver-specific types for timestamps and booleans.
+ *
+ * This is the single source of truth for table DDL.
+ * Both drivers use this function — no separate DDL blocks.
+ */
+export function getCreateTablesDDL(driver) {
+    const ts = driver === "postgres" ? "TIMESTAMPTZ" : "INTEGER";
+    const now = driver === "postgres" ? "now()" : "unixepoch()";
+    const bool = driver === "postgres" ? "BOOLEAN" : "INTEGER";
+    return `
+  CREATE TABLE IF NOT EXISTS pipeline_runs (
+    id TEXT PRIMARY KEY,
+    issue_id TEXT NOT NULL,
+    issue_title TEXT NOT NULL,
+    pipeline_key TEXT NOT NULL,
+    repo_url TEXT NOT NULL,
+    branch TEXT,
+    status TEXT NOT NULL,
+    started_at ${ts} NOT NULL DEFAULT (${now}),
+    completed_at ${ts},
+    pr_url TEXT,
+    total_input_tokens INTEGER NOT NULL DEFAULT 0,
+    total_output_tokens INTEGER NOT NULL DEFAULT 0,
+    error_message TEXT,
+    current_stage_index INTEGER,
+    resume_payload TEXT,
+    retry_count INTEGER NOT NULL DEFAULT 0,
+    run_type TEXT NOT NULL DEFAULT 'standard',
+    parent_run_id TEXT,
+    feedback_context TEXT,
+    auto_merged ${bool},
+    auto_merge_reason TEXT,
+    auto_committed ${bool}
+  );
+
+  CREATE TABLE IF NOT EXISTS stage_runs (
+    id TEXT PRIMARY KEY,
+    pipeline_run_id TEXT NOT NULL REFERENCES pipeline_runs(id),
+    stage TEXT NOT NULL,
+    status TEXT NOT NULL,
+    started_at ${ts} NOT NULL DEFAULT (${now}),
+    completed_at ${ts},
+    input_tokens INTEGER NOT NULL DEFAULT 0,
+    output_tokens INTEGER NOT NULL DEFAULT 0,
+    turns INTEGER NOT NULL DEFAULT 0,
+    handoff_artifact TEXT,
+    error_message TEXT
+  );
+
+  CREATE TABLE IF NOT EXISTS agent_logs (
+    id TEXT PRIMARY KEY,
+    stage_run_id TEXT NOT NULL REFERENCES stage_runs(id),
+    timestamp ${ts} NOT NULL DEFAULT (${now}),
+    type TEXT NOT NULL,
+    content TEXT NOT NULL
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_stage_runs_pipeline_run_id ON stage_runs(pipeline_run_id);
+  CREATE INDEX IF NOT EXISTS idx_agent_logs_stage_run_id ON agent_logs(stage_run_id);
+  CREATE INDEX IF NOT EXISTS idx_pipeline_runs_issue_id ON pipeline_runs(issue_id);
+  CREATE INDEX IF NOT EXISTS idx_pipeline_runs_status ON pipeline_runs(status);
+
+  CREATE TABLE IF NOT EXISTS pm_approvals (
+    id TEXT PRIMARY KEY,
+    issue_id TEXT NOT NULL,
+    action TEXT NOT NULL,
+    reason TEXT NOT NULL,
+    slack_message_ts TEXT NOT NULL,
+    status TEXT NOT NULL,
+    created_at ${ts} NOT NULL DEFAULT (${now}),
+    resolved_at ${ts}
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_pm_approvals_status ON pm_approvals(status);
+
+  CREATE TABLE IF NOT EXISTS active_work (
+    id TEXT PRIMARY KEY,
+    run_id TEXT NOT NULL UNIQUE,
+    issue_id TEXT NOT NULL,
+    stage TEXT NOT NULL,
+    files_modified TEXT,
+    started_at ${ts} NOT NULL DEFAULT (${now}),
+    updated_at ${ts} NOT NULL DEFAULT (${now})
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_active_work_issue_id ON active_work(issue_id);
+
+  CREATE TABLE IF NOT EXISTS webhook_dedup (
+    id TEXT PRIMARY KEY,
+    expires_at ${ts} NOT NULL
+  );
+`;
+}
+/** Generate SQLite ALTER TABLE statements from the unified migration list. */
+export function getMigrateSqlite() {
+    return MIGRATION_COLUMNS.map(({ table, column, sqliteType }) => `ALTER TABLE ${table} ADD COLUMN ${column} ${sqliteType}`);
+}
+/** Generate a Postgres DO $$ ... $$ migration block from the unified migration list. */
+export function getMigratePostgres() {
+    const checks = MIGRATION_COLUMNS.map(({ table, column, pgType }) => `  IF NOT EXISTS (SELECT 1 FROM information_schema.columns\n` +
+        `      WHERE table_name = '${table}' AND column_name = '${column}') THEN\n` +
+        `    ALTER TABLE ${table} ADD COLUMN ${column} ${pgType};\n` +
+        `  END IF;`).join("\n");
+    return `DO $$\nBEGIN\n${checks}\nEND $$;`;
+}
+function detectDriver(connectionString) {
+    if (connectionString.startsWith("postgres://") ||
+        connectionString.startsWith("postgresql://")) {
+        return "postgres";
+    }
+    return "sqlite";
+}
+/** Tag used to identify the driver at runtime. */
+const DB_DRIVER_TAG = Symbol("dbDriver");
+export async function createDb(options) {
+    const driver = options.driver ?? detectDriver(options.connectionString);
+    if (driver === "postgres") {
+        // Set the schema driver so crossTimestamp.toDriver() serialises Dates as
+        // ISO-8601 strings, which Postgres accepts for TIMESTAMPTZ columns.
+        _setSchemaDriver("postgres");
+        const client = postgres(options.connectionString);
+        await client.unsafe(getCreateTablesDDL("postgres"));
+        await client.unsafe(getMigratePostgres());
+        await runMigrationsPostgres(client);
+        const db = drizzlePg(client, { schema: fullSchema });
+        db[DB_DRIVER_TAG] = "postgres";
+        return db;
+    }
+    // SQLite: serialise Dates as epoch-second integers (default).
+    _setSchemaDriver("sqlite");
+    const sqlite = new Database(options.connectionString);
+    sqlite.pragma("journal_mode = WAL");
+    sqlite.pragma("foreign_keys = ON");
+    sqlite.exec(getCreateTablesDDL("sqlite"));
+    for (const stmt of getMigrateSqlite()) {
+        try {
+            sqlite.exec(stmt);
+        }
+        catch { /* column already exists */ }
+    }
+    const db = drizzleSqlite(sqlite, { schema: fullSchema });
+    db[DB_DRIVER_TAG] = "sqlite";
+    return db;
+}
+/** Check if a Db instance is backed by Postgres. */
+export function isPostgres(db) {
+    return db[DB_DRIVER_TAG] === "postgres";
+}
+/**
+ * Returns a SQL expression that formats a crossTimestamp column as 'YYYY-MM-DD'.
+ *
+ * - SQLite:   `date(col, 'unixepoch')` — column is INTEGER epoch seconds
+ * - Postgres: `to_char(col, 'YYYY-MM-DD')` — column is TIMESTAMPTZ
+ */
+export function sqlDateGroup(db, col) {
+    return isPostgres(db)
+        ? sql `to_char(${col}, 'YYYY-MM-DD')`
+        : sql `date(${col}, 'unixepoch')`;
+}
+/**
+ * Returns a SQL expression that filters rows where a crossTimestamp column
+ * is at or after `days` days ago.
+ *
+ * - SQLite:   `col >= unixepoch('now', '-N days')` — column is INTEGER epoch seconds
+ * - Postgres: `col >= now() - interval 'N days'` — column is TIMESTAMPTZ
+ */
+export function sqlDaysAgoFilter(db, col, days) {
+    return isPostgres(db)
+        ? sql `${col} >= now() - interval '${sql.raw(String(days))} days'`
+        : sql `${col} >= unixepoch('now', '-${sql.raw(String(days))} days')`;
+}
+//# sourceMappingURL=client.js.map