@vercel/factory 0.0.0

package/dist/chunk-BSDWPFKE.js

@@ -0,0 +1,197 @@
+// src/schema/common.ts
+import { z } from "zod";
+var SCHEMA_VERSION = 1;
+var schemaVersionSchema = z.literal(SCHEMA_VERSION).describe("Version of the entity schema this row was written with.");
+var isoDateTimeSchema = z.iso.datetime().describe("UTC timestamp in ISO 8601 format, e.g. 2026-08-26T12:00:00Z.");
+var usdSchema = z.number().finite().nonnegative().describe("Amount in US dollars.");
+var vocabularySchema = z.string().regex(/^[a-z][a-z0-9_]{0,63}$/, "must be lowercase snake_case starting with a letter").describe("Lowercase snake_case name, e.g. github_issue or sentry_alert.");
+var replyToSchema = z.strictObject({
+  channel: z.string().min(1).describe("Connector that should carry replies, e.g. github or slack."),
+  address: z.string().min(1).describe("Connector-specific reply address, e.g. acme/web#41 or a Slack thread id.")
+});
+
+// src/schema/id.ts
+import { z as z2 } from "zod";
+function idSchema(prefix) {
+  return z2.string().regex(new RegExp(`^${prefix}_[a-z0-9]{6,64}$`));
+}
+var factoryIdSchema = idSchema("fac");
+var repositoryIdSchema = idSchema("repo");
+var signalIdSchema = idSchema("sig");
+var taskIdSchema = idSchema("task");
+var changeIdSchema = idSchema("chg");
+var receiptIdSchema = idSchema("rcpt");
+var repositoryIdsSchema = z2.array(repositoryIdSchema).min(1);
+
+// src/schema/change.ts
+import { z as z3 } from "zod";
+var levelSchema = z3.enum(["low", "medium", "high"]);
+var changeStateSchema = z3.enum([
+  "verifying",
+  "ready",
+  "merged",
+  "deployed",
+  "rolled_out",
+  "rolled_back",
+  "closed"
+]);
+var postMergeStates = ["merged", "deployed", "rolled_out", "rolled_back"];
+var changeEvidenceSchema = z3.strictObject({
+  reproVerified: z3.boolean(),
+  testsAdded: z3.number().int().min(0),
+  checksGreen: z3.boolean(),
+  attackPassed: z3.boolean(),
+  scopeMatches: z3.boolean(),
+  previewUrl: z3.url().optional()
+});
+var changeSchema = z3.strictObject({
+  schemaVersion: schemaVersionSchema,
+  id: changeIdSchema,
+  repositoryId: repositoryIdSchema,
+  taskId: taskIdSchema.optional(),
+  groupId: taskIdSchema.optional(),
+  prNumber: z3.number().int().min(1),
+  prUrl: z3.url(),
+  author: z3.string().min(1),
+  risk: levelSchema,
+  confidence: levelSchema,
+  evidence: changeEvidenceSchema,
+  state: changeStateSchema,
+  decidedBy: z3.string().min(1).optional(),
+  createdAt: isoDateTimeSchema,
+  updatedAt: isoDateTimeSchema
+}).superRefine((change, ctx) => {
+  if (postMergeStates.includes(change.state) && change.decidedBy === void 0) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["decidedBy"],
+      message: `${change.state} changes require decidedBy`
+    });
+  }
+});
+
+// src/schema/task.ts
+import { z as z4 } from "zod";
+var standardTaskKinds = [
+  "code_change",
+  "verification",
+  "investigation",
+  "question"
+];
+var taskKindSchema = vocabularySchema.describe(
+  "What kind of work this is, e.g. code_change, question, or a registered custom kind."
+);
+var taskStateSchema = z4.enum(["queued", "running", "verifying", "succeeded", "failed", "needs_human", "cancelled"]).describe("Lifecycle state. Transitions are fixed; see taskTransitions.");
+var harnessSchema = z4.string().min(1).describe("Coding harness used in the devbox, e.g. claude-code or codex.");
+var taskOriginSchema = z4.strictObject({
+  signalId: signalIdSchema.optional().describe("Signal that led to this task."),
+  parentTaskId: taskIdSchema.optional().describe("Parent task that planned this child."),
+  operator: z4.string().min(1).optional().describe("Human operator who requested it.")
+}).refine(
+  (origin) => origin.signalId !== void 0 || origin.parentTaskId !== void 0 || origin.operator !== void 0,
+  { message: "origin requires a signalId, parentTaskId, or operator" }
+);
+var taskDevboxSchema = z4.strictObject({
+  devboxId: z4.string().min(1).describe("Devbox running or having run this task."),
+  remoteId: z4.string().min(1).describe("Provider-side id of the execution."),
+  harness: harnessSchema
+});
+var taskQuestionSchema = z4.strictObject({
+  text: z4.string().min(1).describe("The question a human must answer."),
+  options: z4.array(z4.string().min(1)).describe("Suggested answers; free-text is also allowed."),
+  answer: z4.string().min(1).optional(),
+  answeredBy: z4.string().min(1).optional().describe("Authenticated operator who answered.")
+});
+var taskSchema = z4.strictObject({
+  schemaVersion: schemaVersionSchema,
+  id: taskIdSchema,
+  repositoryIds: repositoryIdsSchema.optional().describe("Repositories the task works on; absent only on a multi-repo parent."),
+  kind: taskKindSchema,
+  area: z4.string().min(1).optional().describe("Investigation area, e.g. onboarding or security. Investigation tasks only."),
+  state: taskStateSchema,
+  origin: taskOriginSchema,
+  dependsOn: z4.array(taskIdSchema).min(1).optional().describe("Sibling tasks that must produce a change before this one may run."),
+  replyTo: replyToSchema,
+  devbox: taskDevboxSchema.optional(),
+  attempt: z4.number().int().min(1).describe("Execution attempt, starting at 1; bumps on retry."),
+  reservedUsd: usdSchema.optional().describe("Budget reserved before dispatch."),
+  settledUsd: usdSchema.optional().describe("Measured cost settled after execution."),
+  question: taskQuestionSchema.optional(),
+  changeId: changeIdSchema.optional().describe("Change this code_change task produced."),
+  reportRef: z4.string().min(1).optional().describe("Reference to the report artifact an investigation produced."),
+  createdAt: isoDateTimeSchema,
+  updatedAt: isoDateTimeSchema
+}).superRefine((task, ctx) => {
+  if (task.area !== void 0 && task.kind !== "investigation") {
+    ctx.addIssue({
+      code: "custom",
+      path: ["area"],
+      message: "area is only valid on investigation tasks"
+    });
+  }
+  if (task.kind === "question") {
+    if (task.question === void 0) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["question"],
+        message: "question tasks require a question"
+      });
+    }
+    if (task.devbox !== void 0) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["devbox"],
+        message: "question tasks never run in a devbox"
+      });
+    }
+  } else if (task.question !== void 0) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["question"],
+      message: "question is only valid on question tasks"
+    });
+  }
+  if (task.changeId !== void 0 && task.kind !== "code_change") {
+    ctx.addIssue({
+      code: "custom",
+      path: ["changeId"],
+      message: "changeId is only valid on code_change tasks"
+    });
+  }
+  if (task.reportRef !== void 0 && task.kind !== "investigation") {
+    ctx.addIssue({
+      code: "custom",
+      path: ["reportRef"],
+      message: "reportRef is only valid on investigation tasks"
+    });
+  }
+});
+
+export {
+  SCHEMA_VERSION,
+  schemaVersionSchema,
+  isoDateTimeSchema,
+  usdSchema,
+  vocabularySchema,
+  replyToSchema,
+  factoryIdSchema,
+  repositoryIdSchema,
+  signalIdSchema,
+  taskIdSchema,
+  changeIdSchema,
+  receiptIdSchema,
+  repositoryIdsSchema,
+  levelSchema,
+  changeStateSchema,
+  changeEvidenceSchema,
+  changeSchema,
+  standardTaskKinds,
+  taskKindSchema,
+  taskStateSchema,
+  harnessSchema,
+  taskOriginSchema,
+  taskDevboxSchema,
+  taskQuestionSchema,
+  taskSchema
+};
+//# sourceMappingURL=chunk-BSDWPFKE.js.map

package/dist/chunk-BSDWPFKE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/schema/common.ts","../src/schema/id.ts","../src/schema/change.ts","../src/schema/task.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const SCHEMA_VERSION = 1;\n\nexport const schemaVersionSchema = z\n  .literal(SCHEMA_VERSION)\n  .describe(\"Version of the entity schema this row was written with.\");\n\nexport const isoDateTimeSchema = z.iso\n  .datetime()\n  .describe(\"UTC timestamp in ISO 8601 format, e.g. 2026-08-26T12:00:00Z.\");\n\nexport const usdSchema = z.number().finite().nonnegative().describe(\"Amount in US dollars.\");\n\n/**\n * Open vocabulary value. Standard values ship as exported constants; custom\n * values matching the pattern are equally valid.\n */\nexport const vocabularySchema = z\n  .string()\n  .regex(/^[a-z][a-z0-9_]{0,63}$/, \"must be lowercase snake_case starting with a letter\")\n  .describe(\"Lowercase snake_case name, e.g. github_issue or sentry_alert.\");\n\nexport const replyToSchema = z.strictObject({\n  channel: z\n    .string()\n    .min(1)\n    .describe(\"Connector that should carry replies, e.g. github or slack.\"),\n  address: z\n    .string()\n    .min(1)\n    .describe(\"Connector-specific reply address, e.g. acme/web#41 or a Slack thread id.\"),\n});\n\nexport type ReplyTo = z.infer<typeof replyToSchema>;\n","import { z } from \"zod\";\n\nfunction idSchema(prefix: string) {\n  return z.string().regex(new RegExp(`^${prefix}_[a-z0-9]{6,64}$`));\n}\n\nexport const factoryIdSchema = idSchema(\"fac\");\nexport const repositoryIdSchema = idSchema(\"repo\");\nexport const signalIdSchema = idSchema(\"sig\");\nexport const taskIdSchema = idSchema(\"task\");\nexport const changeIdSchema = idSchema(\"chg\");\nexport const receiptIdSchema = idSchema(\"rcpt\");\n\nexport const repositoryIdsSchema = z.array(repositoryIdSchema).min(1);\n\nexport type FactoryId = z.infer<typeof factoryIdSchema>;\nexport type RepositoryId = z.infer<typeof repositoryIdSchema>;\nexport type SignalId = z.infer<typeof signalIdSchema>;\nexport type TaskId = z.infer<typeof taskIdSchema>;\nexport type ChangeId = z.infer<typeof changeIdSchema>;\nexport type ReceiptId = z.infer<typeof receiptIdSchema>;\n","import { z } from \"zod\";\nimport { isoDateTimeSchema, schemaVersionSchema } from \"./common\";\nimport { changeIdSchema, repositoryIdSchema, taskIdSchema } from \"./id\";\n\nexport const levelSchema = z.enum([\"low\", \"medium\", \"high\"]);\n\nexport const changeStateSchema = z.enum([\n  \"verifying\",\n  \"ready\",\n  \"merged\",\n  \"deployed\",\n  \"rolled_out\",\n  \"rolled_back\",\n  \"closed\",\n]);\n\nconst postMergeStates: readonly string[] = [\"merged\", \"deployed\", \"rolled_out\", \"rolled_back\"];\n\nexport const changeEvidenceSchema = z.strictObject({\n  reproVerified: z.boolean(),\n  testsAdded: z.number().int().min(0),\n  checksGreen: z.boolean(),\n  attackPassed: z.boolean(),\n  scopeMatches: z.boolean(),\n  previewUrl: z.url().optional(),\n});\n\nexport const changeSchema = z\n  .strictObject({\n    schemaVersion: schemaVersionSchema,\n    id: changeIdSchema,\n    repositoryId: repositoryIdSchema,\n    taskId: taskIdSchema.optional(),\n    groupId: taskIdSchema.optional(),\n    prNumber: z.number().int().min(1),\n    prUrl: z.url(),\n    author: z.string().min(1),\n    risk: levelSchema,\n    confidence: levelSchema,\n    evidence: changeEvidenceSchema,\n    state: changeStateSchema,\n    decidedBy: z.string().min(1).optional(),\n    createdAt: isoDateTimeSchema,\n    updatedAt: isoDateTimeSchema,\n  })\n  .superRefine((change, ctx) => {\n    if (postMergeStates.includes(change.state) && change.decidedBy === undefined) {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"decidedBy\"],\n        message: `${change.state} changes require decidedBy`,\n      });\n    }\n  });\n\nexport type Level = z.infer<typeof levelSchema>;\nexport type ChangeState = z.infer<typeof changeStateSchema>;\nexport type ChangeEvidence = z.infer<typeof changeEvidenceSchema>;\nexport type Change = z.infer<typeof changeSchema>;\n","import { z } from \"zod\";\nimport {\n  isoDateTimeSchema,\n  replyToSchema,\n  schemaVersionSchema,\n  usdSchema,\n  vocabularySchema,\n} from \"./common\";\nimport { changeIdSchema, repositoryIdsSchema, signalIdSchema, taskIdSchema } from \"./id\";\n\n/**\n * Kinds the standard loop understands. Any vocabulary value is valid; the\n * kind-scoped rules below apply only to these standard kinds.\n */\nexport const standardTaskKinds = [\n  \"code_change\",\n  \"verification\",\n  \"investigation\",\n  \"question\",\n] as const;\n\nexport const taskKindSchema = vocabularySchema.describe(\n  \"What kind of work this is, e.g. code_change, question, or a registered custom kind.\",\n);\n\nexport const taskStateSchema = z\n  .enum([\"queued\", \"running\", \"verifying\", \"succeeded\", \"failed\", \"needs_human\", \"cancelled\"])\n  .describe(\"Lifecycle state. Transitions are fixed; see taskTransitions.\");\n\nexport const harnessSchema = z\n  .string()\n  .min(1)\n  .describe(\"Coding harness used in the devbox, e.g. claude-code or codex.\");\n\nexport const taskOriginSchema = z\n  .strictObject({\n    signalId: signalIdSchema.optional().describe(\"Signal that led to this task.\"),\n    parentTaskId: taskIdSchema.optional().describe(\"Parent task that planned this child.\"),\n    operator: z.string().min(1).optional().describe(\"Human operator who requested it.\"),\n  })\n  .refine(\n    (origin) =>\n      origin.signalId !== undefined ||\n      origin.parentTaskId !== undefined ||\n      origin.operator !== undefined,\n    { message: \"origin requires a signalId, parentTaskId, or operator\" },\n  );\n\nexport const taskDevboxSchema = z.strictObject({\n  devboxId: z.string().min(1).describe(\"Devbox running or having run this task.\"),\n  remoteId: z.string().min(1).describe(\"Provider-side id of the execution.\"),\n  harness: harnessSchema,\n});\n\nexport const taskQuestionSchema = z.strictObject({\n  text: z.string().min(1).describe(\"The question a human must answer.\"),\n  options: z.array(z.string().min(1)).describe(\"Suggested answers; free-text is also allowed.\"),\n  answer: z.string().min(1).optional(),\n  answeredBy: z.string().min(1).optional().describe(\"Authenticated operator who answered.\"),\n});\n\nexport const taskSchema = z\n  .strictObject({\n    schemaVersion: schemaVersionSchema,\n    id: taskIdSchema,\n    repositoryIds: repositoryIdsSchema\n      .optional()\n      .describe(\"Repositories the task works on; absent only on a multi-repo parent.\"),\n    kind: taskKindSchema,\n    area: z\n      .string()\n      .min(1)\n      .optional()\n      .describe(\"Investigation area, e.g. onboarding or security. Investigation tasks only.\"),\n    state: taskStateSchema,\n    origin: taskOriginSchema,\n    dependsOn: z\n      .array(taskIdSchema)\n      .min(1)\n      .optional()\n      .describe(\"Sibling tasks that must produce a change before this one may run.\"),\n    replyTo: replyToSchema,\n    devbox: taskDevboxSchema.optional(),\n    attempt: z\n      .number()\n      .int()\n      .min(1)\n      .describe(\"Execution attempt, starting at 1; bumps on retry.\"),\n    reservedUsd: usdSchema.optional().describe(\"Budget reserved before dispatch.\"),\n    settledUsd: usdSchema.optional().describe(\"Measured cost settled after execution.\"),\n    question: taskQuestionSchema.optional(),\n    changeId: changeIdSchema.optional().describe(\"Change this code_change task produced.\"),\n    reportRef: z\n      .string()\n      .min(1)\n      .optional()\n      .describe(\"Reference to the report artifact an investigation produced.\"),\n    createdAt: isoDateTimeSchema,\n    updatedAt: isoDateTimeSchema,\n  })\n  .superRefine((task, ctx) => {\n    if (task.area !== undefined && task.kind !== \"investigation\") {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"area\"],\n        message: \"area is only valid on investigation tasks\",\n      });\n    }\n    if (task.kind === \"question\") {\n      if (task.question === undefined) {\n        ctx.addIssue({\n          code: \"custom\",\n          path: [\"question\"],\n          message: \"question tasks require a question\",\n        });\n      }\n      if (task.devbox !== undefined) {\n        ctx.addIssue({\n          code: \"custom\",\n          path: [\"devbox\"],\n          message: \"question tasks never run in a devbox\",\n        });\n      }\n    } else if (task.question !== undefined) {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"question\"],\n        message: \"question is only valid on question tasks\",\n      });\n    }\n    if (task.changeId !== undefined && task.kind !== \"code_change\") {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"changeId\"],\n        message: \"changeId is only valid on code_change tasks\",\n      });\n    }\n    if (task.reportRef !== undefined && task.kind !== \"investigation\") {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"reportRef\"],\n        message: \"reportRef is only valid on investigation tasks\",\n      });\n    }\n  });\n\nexport type TaskKind = z.infer<typeof taskKindSchema>;\nexport type TaskState = z.infer<typeof taskStateSchema>;\nexport type Task = z.infer<typeof taskSchema>;\n"],"mappings":";AAAA,SAAS,SAAS;AAEX,IAAM,iBAAiB;AAEvB,IAAM,sBAAsB,EAChC,QAAQ,cAAc,EACtB,SAAS,yDAAyD;AAE9D,IAAM,oBAAoB,EAAE,IAChC,SAAS,EACT,SAAS,8DAA8D;AAEnE,IAAM,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,uBAAuB;AAMpF,IAAM,mBAAmB,EAC7B,OAAO,EACP,MAAM,0BAA0B,qDAAqD,EACrF,SAAS,+DAA+D;AAEpE,IAAM,gBAAgB,EAAE,aAAa;AAAA,EAC1C,SAAS,EACN,OAAO,EACP,IAAI,CAAC,EACL,SAAS,4DAA4D;AAAA,EACxE,SAAS,EACN,OAAO,EACP,IAAI,CAAC,EACL,SAAS,0EAA0E;AACxF,CAAC;;;AChCD,SAAS,KAAAA,UAAS;AAElB,SAAS,SAAS,QAAgB;AAChC,SAAOA,GAAE,OAAO,EAAE,MAAM,IAAI,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAClE;AAEO,IAAM,kBAAkB,SAAS,KAAK;AACtC,IAAM,qBAAqB,SAAS,MAAM;AAC1C,IAAM,iBAAiB,SAAS,KAAK;AACrC,IAAM,eAAe,SAAS,MAAM;AACpC,IAAM,iBAAiB,SAAS,KAAK;AACrC,IAAM,kBAAkB,SAAS,MAAM;AAEvC,IAAM,sBAAsBA,GAAE,MAAM,kBAAkB,EAAE,IAAI,CAAC;;;ACbpE,SAAS,KAAAC,UAAS;AAIX,IAAM,cAAcC,GAAE,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC;AAEpD,IAAM,oBAAoBA,GAAE,KAAK;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,kBAAqC,CAAC,UAAU,YAAY,cAAc,aAAa;AAEtF,IAAM,uBAAuBA,GAAE,aAAa;AAAA,EACjD,eAAeA,GAAE,QAAQ;AAAA,EACzB,YAAYA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EAClC,aAAaA,GAAE,QAAQ;AAAA,EACvB,cAAcA,GAAE,QAAQ;AAAA,EACxB,cAAcA,GAAE,QAAQ;AAAA,EACxB,YAAYA,GAAE,IAAI,EAAE,SAAS;AAC/B,CAAC;AAEM,IAAM,eAAeA,GACzB,aAAa;AAAA,EACZ,eAAe;AAAA,EACf,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,QAAQ,aAAa,SAAS;AAAA,EAC9B,SAAS,aAAa,SAAS;AAAA,EAC/B,UAAUA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EAChC,OAAOA,GAAE,IAAI;AAAA,EACb,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,MAAM;AAAA,EACN,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,OAAO;AAAA,EACP,WAAWA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACtC,WAAW;AAAA,EACX,WAAW;AACb,CAAC,EACA,YAAY,CAAC,QAAQ,QAAQ;AAC5B,MAAI,gBAAgB,SAAS,OAAO,KAAK,KAAK,OAAO,cAAc,QAAW;AAC5E,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,WAAW;AAAA,MAClB,SAAS,GAAG,OAAO,KAAK;AAAA,IAC1B,CAAC;AAAA,EACH;AACF,CAAC;;;ACrDH,SAAS,KAAAC,UAAS;AAcX,IAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,iBAAiB,iBAAiB;AAAA,EAC7C;AACF;AAEO,IAAM,kBAAkBC,GAC5B,KAAK,CAAC,UAAU,WAAW,aAAa,aAAa,UAAU,eAAe,WAAW,CAAC,EAC1F,SAAS,8DAA8D;AAEnE,IAAM,gBAAgBA,GAC1B,OAAO,EACP,IAAI,CAAC,EACL,SAAS,+DAA+D;AAEpE,IAAM,mBAAmBA,GAC7B,aAAa;AAAA,EACZ,UAAU,eAAe,SAAS,EAAE,SAAS,+BAA+B;AAAA,EAC5E,cAAc,aAAa,SAAS,EAAE,SAAS,sCAAsC;AAAA,EACrF,UAAUA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,kCAAkC;AACpF,CAAC,EACA;AAAA,EACC,CAAC,WACC,OAAO,aAAa,UACpB,OAAO,iBAAiB,UACxB,OAAO,aAAa;AAAA,EACtB,EAAE,SAAS,wDAAwD;AACrE;AAEK,IAAM,mBAAmBA,GAAE,aAAa;AAAA,EAC7C,UAAUA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,yCAAyC;AAAA,EAC9E,UAAUA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,oCAAoC;AAAA,EACzE,SAAS;AACX,CAAC;AAEM,IAAM,qBAAqBA,GAAE,aAAa;AAAA,EAC/C,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,mCAAmC;AAAA,EACpE,SAASA,GAAE,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,+CAA+C;AAAA,EAC5F,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACnC,YAAYA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,sCAAsC;AAC1F,CAAC;AAEM,IAAM,aAAaA,GACvB,aAAa;AAAA,EACZ,eAAe;AAAA,EACf,IAAI;AAAA,EACJ,eAAe,oBACZ,SAAS,EACT,SAAS,qEAAqE;AAAA,EACjF,MAAM;AAAA,EACN,MAAMA,GACH,OAAO,EACP,IAAI,CAAC,EACL,SAAS,EACT,SAAS,4EAA4E;AAAA,EACxF,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,WAAWA,GACR,MAAM,YAAY,EAClB,IAAI,CAAC,EACL,SAAS,EACT,SAAS,mEAAmE;AAAA,EAC/E,SAAS;AAAA,EACT,QAAQ,iBAAiB,SAAS;AAAA,EAClC,SAASA,GACN,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,SAAS,mDAAmD;AAAA,EAC/D,aAAa,UAAU,SAAS,EAAE,SAAS,kCAAkC;AAAA,EAC7E,YAAY,UAAU,SAAS,EAAE,SAAS,wCAAwC;AAAA,EAClF,UAAU,mBAAmB,SAAS;AAAA,EACtC,UAAU,eAAe,SAAS,EAAE,SAAS,wCAAwC;AAAA,EACrF,WAAWA,GACR,OAAO,EACP,IAAI,CAAC,EACL,SAAS,EACT,SAAS,6DAA6D;AAAA,EACzE,WAAW;AAAA,EACX,WAAW;AACb,CAAC,EACA,YAAY,CAAC,MAAM,QAAQ;AAC1B,MAAI,KAAK,SAAS,UAAa,KAAK,SAAS,iBAAiB;AAC5D,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,MAAM;AAAA,MACb,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,KAAK,SAAS,YAAY;AAC5B,QAAI,KAAK,aAAa,QAAW;AAC/B,UAAI,SAAS;AAAA,QACX,MAAM;AAAA,QACN,MAAM,CAAC,UAAU;AAAA,QACjB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,KAAK,WAAW,QAAW;AAC7B,UAAI,SAAS;AAAA,QACX,MAAM;AAAA,QACN,MAAM,CAAC,QAAQ;AAAA,QACf,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF,WAAW,KAAK,aAAa,QAAW;AACtC,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,UAAU;AAAA,MACjB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,KAAK,aAAa,UAAa,KAAK,SAAS,eAAe;AAC9D,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,UAAU;AAAA,MACjB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,KAAK,cAAc,UAAa,KAAK,SAAS,iBAAiB;AACjE,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,WAAW;AAAA,MAClB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;","names":["z","z","z","z","z"]}

package/dist/chunk-CEF6VJZC.js

@@ -0,0 +1,28 @@
+// src/store/driver.ts
+var RecordExistsError = class extends Error {
+  constructor(collection, id) {
+    super(`record "${id}" already exists in "${collection}"`);
+    this.name = "RecordExistsError";
+  }
+};
+var RecordNotFoundError = class extends Error {
+  constructor(collection, id) {
+    super(`record "${id}" not found in "${collection}"`);
+    this.name = "RecordNotFoundError";
+  }
+};
+var VersionConflictError = class extends Error {
+  constructor(collection, id, expectedVersion) {
+    super(
+      `record "${id}" in "${collection}" changed since version ${expectedVersion} was read`
+    );
+    this.name = "VersionConflictError";
+  }
+};
+
+export {
+  RecordExistsError,
+  RecordNotFoundError,
+  VersionConflictError
+};
+//# sourceMappingURL=chunk-CEF6VJZC.js.map

package/dist/chunk-CEF6VJZC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/store/driver.ts"],"sourcesContent":["export type CollectionName = \"repositories\" | \"signals\" | \"tasks\" | \"changes\" | \"receipts\";\n\nexport interface StoredRecord {\n  readonly value: unknown;\n  readonly version: number;\n}\n\nexport interface StoredEntry {\n  readonly id: string;\n  readonly record: StoredRecord;\n}\n\nexport class RecordExistsError extends Error {\n  constructor(collection: CollectionName, id: string) {\n    super(`record \"${id}\" already exists in \"${collection}\"`);\n    this.name = \"RecordExistsError\";\n  }\n}\n\nexport class RecordNotFoundError extends Error {\n  constructor(collection: CollectionName, id: string) {\n    super(`record \"${id}\" not found in \"${collection}\"`);\n    this.name = \"RecordNotFoundError\";\n  }\n}\n\nexport class VersionConflictError extends Error {\n  constructor(collection: CollectionName, id: string, expectedVersion: number) {\n    super(\n      `record \"${id}\" in \"${collection}\" changed since version ${expectedVersion} was read`,\n    );\n    this.name = \"VersionConflictError\";\n  }\n}\n\n/**\n * Raw persistence contract. Drivers store opaque values and enforce nothing\n * about their content; every invariant lives in the engine above. `update`\n * must be an atomic compare-and-swap on `expectedVersion`.\n */\nexport interface StoreDriver {\n  readonly name: string;\n  get(collection: CollectionName, id: string): Promise<StoredRecord | null>;\n  insert(collection: CollectionName, id: string, value: unknown): Promise<void>;\n  update(\n    collection: CollectionName,\n    id: string,\n    value: unknown,\n    expectedVersion: number,\n  ): Promise<void>;\n  list(collection: CollectionName): Promise<readonly StoredEntry[]>;\n}\n"],"mappings":";AAYO,IAAM,oBAAN,cAAgC,MAAM;AAAA,EAC3C,YAAY,YAA4B,IAAY;AAClD,UAAM,WAAW,EAAE,wBAAwB,UAAU,GAAG;AACxD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YAAY,YAA4B,IAAY;AAClD,UAAM,WAAW,EAAE,mBAAmB,UAAU,GAAG;AACnD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAC9C,YAAY,YAA4B,IAAY,iBAAyB;AAC3E;AAAA,MACE,WAAW,EAAE,SAAS,UAAU,2BAA2B,eAAe;AAAA,IAC5E;AACA,SAAK,OAAO;AAAA,EACd;AACF;","names":[]}

package/dist/common-CaHaEOAS.d.ts

@@ -0,0 +1,18 @@
+import { z } from 'zod';
+
+declare const SCHEMA_VERSION = 1;
+declare const schemaVersionSchema: z.ZodLiteral<1>;
+declare const isoDateTimeSchema: z.ZodISODateTime;
+declare const usdSchema: z.ZodNumber;
+/**
+ * Open vocabulary value. Standard values ship as exported constants; custom
+ * values matching the pattern are equally valid.
+ */
+declare const vocabularySchema: z.ZodString;
+declare const replyToSchema: z.ZodObject<{
+    channel: z.ZodString;
+    address: z.ZodString;
+}, z.core.$strict>;
+type ReplyTo = z.infer<typeof replyToSchema>;
+
+export { type ReplyTo as R, SCHEMA_VERSION as S, isoDateTimeSchema as i, replyToSchema as r, schemaVersionSchema as s, usdSchema as u, vocabularySchema as v };

package/dist/connectors/github.d.ts

@@ -0,0 +1,37 @@
+import { R as ReplyTo } from '../common-CaHaEOAS.js';
+import 'zod';
+
+/**
+ * Verify a GitHub webhook HMAC signature (the x-hub-signature-256 header)
+ * against the raw request body. Returns false for missing or malformed
+ * signatures instead of throwing.
+ */
+declare function verifyGitHubSignature(options: {
+    secret: string;
+    payload: string;
+    signature: string | null;
+}): boolean;
+interface GitHubIssueSignal {
+    source: "github_issue";
+    deliveryId: string;
+    repositorySlug: string;
+    replyTo: ReplyTo;
+    issue: {
+        number: number;
+        title: string;
+        body: string | null;
+    };
+    payload: unknown;
+}
+/**
+ * Normalize a GitHub issues webhook into the factory's signal shape. Returns
+ * null for payloads that are not an opened issue. The caller supplies the
+ * repository id; the payload stays untrusted data.
+ */
+declare function normalizeGitHubIssueOpened(options: {
+    deliveryId: string;
+    event: string;
+    payload: unknown;
+}): GitHubIssueSignal | null;
+
+export { type GitHubIssueSignal, normalizeGitHubIssueOpened, verifyGitHubSignature };

package/dist/connectors/github.js

@@ -0,0 +1,50 @@
+// src/connectors/github.ts
+import { createHmac, timingSafeEqual } from "crypto";
+import { z } from "zod";
+function verifyGitHubSignature(options) {
+  const { secret, payload, signature } = options;
+  if (signature === null || !signature.startsWith("sha256=")) {
+    return false;
+  }
+  const expected = createHmac("sha256", secret).update(payload).digest("hex");
+  const provided = signature.slice("sha256=".length);
+  if (provided.length !== expected.length) {
+    return false;
+  }
+  return timingSafeEqual(Buffer.from(provided, "hex"), Buffer.from(expected, "hex"));
+}
+var issueEventSchema = z.looseObject({
+  action: z.string(),
+  issue: z.looseObject({
+    number: z.number().int().min(1),
+    title: z.string(),
+    body: z.string().nullable()
+  }),
+  repository: z.looseObject({
+    full_name: z.string().min(1)
+  })
+});
+function normalizeGitHubIssueOpened(options) {
+  if (options.event !== "issues") {
+    return null;
+  }
+  const parsed = issueEventSchema.safeParse(options.payload);
+  if (!parsed.success || parsed.data.action !== "opened") {
+    return null;
+  }
+  const slug = parsed.data.repository.full_name.toLowerCase();
+  const { number, title, body } = parsed.data.issue;
+  return {
+    source: "github_issue",
+    deliveryId: options.deliveryId,
+    repositorySlug: slug,
+    replyTo: { channel: "github", address: `${slug}#${number}` },
+    issue: { number, title, body },
+    payload: options.payload
+  };
+}
+export {
+  normalizeGitHubIssueOpened,
+  verifyGitHubSignature
+};
+//# sourceMappingURL=github.js.map

package/dist/connectors/github.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/connectors/github.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport { z } from \"zod\";\nimport type { ReplyTo } from \"../schema/common\";\n\n/**\n * Verify a GitHub webhook HMAC signature (the x-hub-signature-256 header)\n * against the raw request body. Returns false for missing or malformed\n * signatures instead of throwing.\n */\nexport function verifyGitHubSignature(options: {\n  secret: string;\n  payload: string;\n  signature: string | null;\n}): boolean {\n  const { secret, payload, signature } = options;\n  if (signature === null || !signature.startsWith(\"sha256=\")) {\n    return false;\n  }\n  const expected = createHmac(\"sha256\", secret).update(payload).digest(\"hex\");\n  const provided = signature.slice(\"sha256=\".length);\n  if (provided.length !== expected.length) {\n    return false;\n  }\n  return timingSafeEqual(Buffer.from(provided, \"hex\"), Buffer.from(expected, \"hex\"));\n}\n\nconst issueEventSchema = z.looseObject({\n  action: z.string(),\n  issue: z.looseObject({\n    number: z.number().int().min(1),\n    title: z.string(),\n    body: z.string().nullable(),\n  }),\n  repository: z.looseObject({\n    full_name: z.string().min(1),\n  }),\n});\n\nexport interface GitHubIssueSignal {\n  source: \"github_issue\";\n  deliveryId: string;\n  repositorySlug: string;\n  replyTo: ReplyTo;\n  issue: { number: number; title: string; body: string | null };\n  payload: unknown;\n}\n\n/**\n * Normalize a GitHub issues webhook into the factory's signal shape. Returns\n * null for payloads that are not an opened issue. The caller supplies the\n * repository id; the payload stays untrusted data.\n */\nexport function normalizeGitHubIssueOpened(options: {\n  deliveryId: string;\n  event: string;\n  payload: unknown;\n}): GitHubIssueSignal | null {\n  if (options.event !== \"issues\") {\n    return null;\n  }\n  const parsed = issueEventSchema.safeParse(options.payload);\n  if (!parsed.success || parsed.data.action !== \"opened\") {\n    return null;\n  }\n  const slug = parsed.data.repository.full_name.toLowerCase();\n  const { number, title, body } = parsed.data.issue;\n  return {\n    source: \"github_issue\",\n    deliveryId: options.deliveryId,\n    repositorySlug: slug,\n    replyTo: { channel: \"github\", address: `${slug}#${number}` },\n    issue: { number, title, body },\n    payload: options.payload,\n  };\n}\n"],"mappings":";AAAA,SAAS,YAAY,uBAAuB;AAC5C,SAAS,SAAS;AAQX,SAAS,sBAAsB,SAI1B;AACV,QAAM,EAAE,QAAQ,SAAS,UAAU,IAAI;AACvC,MAAI,cAAc,QAAQ,CAAC,UAAU,WAAW,SAAS,GAAG;AAC1D,WAAO;AAAA,EACT;AACA,QAAM,WAAW,WAAW,UAAU,MAAM,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAC1E,QAAM,WAAW,UAAU,MAAM,UAAU,MAAM;AACjD,MAAI,SAAS,WAAW,SAAS,QAAQ;AACvC,WAAO;AAAA,EACT;AACA,SAAO,gBAAgB,OAAO,KAAK,UAAU,KAAK,GAAG,OAAO,KAAK,UAAU,KAAK,CAAC;AACnF;AAEA,IAAM,mBAAmB,EAAE,YAAY;AAAA,EACrC,QAAQ,EAAE,OAAO;AAAA,EACjB,OAAO,EAAE,YAAY;AAAA,IACnB,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,IAC9B,OAAO,EAAE,OAAO;AAAA,IAChB,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,CAAC;AAAA,EACD,YAAY,EAAE,YAAY;AAAA,IACxB,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC7B,CAAC;AACH,CAAC;AAgBM,SAAS,2BAA2B,SAId;AAC3B,MAAI,QAAQ,UAAU,UAAU;AAC9B,WAAO;AAAA,EACT;AACA,QAAM,SAAS,iBAAiB,UAAU,QAAQ,OAAO;AACzD,MAAI,CAAC,OAAO,WAAW,OAAO,KAAK,WAAW,UAAU;AACtD,WAAO;AAAA,EACT;AACA,QAAM,OAAO,OAAO,KAAK,WAAW,UAAU,YAAY;AAC1D,QAAM,EAAE,QAAQ,OAAO,KAAK,IAAI,OAAO,KAAK;AAC5C,SAAO;AAAA,IACL,QAAQ;AAAA,IACR,YAAY,QAAQ;AAAA,IACpB,gBAAgB;AAAA,IAChB,SAAS,EAAE,SAAS,UAAU,SAAS,GAAG,IAAI,IAAI,MAAM,GAAG;AAAA,IAC3D,OAAO,EAAE,QAAQ,OAAO,KAAK;AAAA,IAC7B,SAAS,QAAQ;AAAA,EACnB;AACF;","names":[]}

package/dist/driver-tRNggCCJ.d.ts

@@ -0,0 +1,32 @@
+type CollectionName = "repositories" | "signals" | "tasks" | "changes" | "receipts";
+interface StoredRecord {
+    readonly value: unknown;
+    readonly version: number;
+}
+interface StoredEntry {
+    readonly id: string;
+    readonly record: StoredRecord;
+}
+declare class RecordExistsError extends Error {
+    constructor(collection: CollectionName, id: string);
+}
+declare class RecordNotFoundError extends Error {
+    constructor(collection: CollectionName, id: string);
+}
+declare class VersionConflictError extends Error {
+    constructor(collection: CollectionName, id: string, expectedVersion: number);
+}
+/**
+ * Raw persistence contract. Drivers store opaque values and enforce nothing
+ * about their content; every invariant lives in the engine above. `update`
+ * must be an atomic compare-and-swap on `expectedVersion`.
+ */
+interface StoreDriver {
+    readonly name: string;
+    get(collection: CollectionName, id: string): Promise<StoredRecord | null>;
+    insert(collection: CollectionName, id: string, value: unknown): Promise<void>;
+    update(collection: CollectionName, id: string, value: unknown, expectedVersion: number): Promise<void>;
+    list(collection: CollectionName): Promise<readonly StoredEntry[]>;
+}
+
+export { type CollectionName as C, RecordExistsError as R, type StoreDriver as S, VersionConflictError as V, RecordNotFoundError as a, type StoredEntry as b, type StoredRecord as c };