@vercel/factory 0.0.2 → 0.0.4

package/dist/blob/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/blob/index.ts"],"sourcesContent":["import { get, head, list, put } from \"@vercel/blob\";\nimport {\n  RecordExistsError,\n  RecordNotFoundError,\n  VersionConflictError,\n  type CollectionName,\n  type StoredEntry,\n  type StoreDriver,\n} from \"../store/driver\";\n\n/** The narrow blob operations the driver needs; injectable for tests. */\nexport interface BlobClient {\n  read(pathname: string): Promise<string | null>;\n  /** Must reject with an already-exists error when overwrite is false and the path exists. */\n  write(pathname: string, body: string, overwrite: boolean): Promise<void>;\n  listPaths(prefix: string): Promise<string[]>;\n}\n\n// @vercel/blob throws BlobNotFoundError with the message\n// \"Vercel Blob: The requested blob does not exist\".\nfunction isNotFoundError(error: unknown): boolean {\n  return (\n    error instanceof Error &&\n    (error.name === \"BlobNotFoundError\" ||\n      /does not exist|not.?found|404/iu.test(error.message))\n  );\n}\n\nfunction isAlreadyExistsError(error: unknown): boolean {\n  return (\n    error instanceof Error &&\n    /already exists|not allowed to overwrite|overwrite/iu.test(error.message)\n  );\n}\n\nexport const vercelBlobClient: BlobClient = {\n  async read(pathname) {\n    let url: string;\n    try {\n      url = (await head(pathname)).url;\n    } catch (error) {\n      if (isNotFoundError(error)) {\n        return null;\n      }\n      throw error;\n    }\n    const result = await get(url, { access: \"private\" });\n    if (result === null) {\n      return null;\n    }\n    return new Response(result.stream).text();\n  },\n\n  async write(pathname, body, overwrite) {\n    await put(pathname, body, {\n      access: \"private\",\n      allowOverwrite: overwrite,\n      contentType: \"application/json\",\n    });\n  },\n\n  async listPaths(prefix) {\n    const paths: string[] = [];\n    let cursor: string | undefined;\n    do {\n      const page = await list({ prefix, cursor, limit: 1000 });\n      paths.push(...page.blobs.map((blob) => blob.pathname));\n      cursor = page.hasMore ? page.cursor : undefined;\n    } while (cursor !== undefined);\n    return paths;\n  },\n};\n\nexport interface BlobDriverOptions {\n  client?: BlobClient;\n  /** Path prefix inside the blob store; defaults to \"factory\". */\n  prefix?: string;\n}\n\n/**\n * Store driver on Vercel Blob: durable and dependency-free (one Blob store on\n * the project, no database). Inserts and receipts are exactly as safe as on\n * Postgres (create-if-absent is atomic). The compare-and-swap update is\n * BEST-EFFORT: the version check reads then writes without a lock, so two\n * simultaneous writers can race. Acceptable for low-volume factories; use the\n * Postgres driver when concurrent dispatchers are expected.\n */\nexport function createBlobDriver(options: BlobDriverOptions = {}): StoreDriver {\n  const client = options.client ?? vercelBlobClient;\n  const prefix = options.prefix ?? \"factory\";\n\n  function pathFor(collection: CollectionName, id: string): string {\n    return `${prefix}/${collection}/${id}.json`;\n  }\n\n  async function readRecord(\n    collection: CollectionName,\n    id: string,\n  ): Promise<{ value: unknown; version: number } | null> {\n    let text: string | null;\n    try {\n      text = await client.read(pathFor(collection, id));\n    } catch (error) {\n      if (isNotFoundError(error)) {\n        return null;\n      }\n      throw error;\n    }\n    if (text === null) {\n      return null;\n    }\n    const parsed = JSON.parse(text) as { value: unknown; version: number };\n    if (typeof parsed.version !== \"number\") {\n      throw new Error(`malformed stored record at ${pathFor(collection, id)}`);\n    }\n    return parsed;\n  }\n\n  return {\n    name: \"blob\",\n\n    get(collection, id) {\n      return readRecord(collection, id);\n    },\n\n    async insert(collection, id, value) {\n      try {\n        await client.write(\n          pathFor(collection, id),\n          JSON.stringify({ value, version: 1 }),\n          false,\n        );\n      } catch (error) {\n        if (isAlreadyExistsError(error)) {\n          throw new RecordExistsError(collection, id);\n        }\n        throw error;\n      }\n    },\n\n    async update(collection, id, value, expectedVersion) {\n      const existing = await readRecord(collection, id);\n      if (existing === null) {\n        throw new RecordNotFoundError(collection, id);\n      }\n      if (existing.version !== expectedVersion) {\n        throw new VersionConflictError(collection, id, expectedVersion);\n      }\n      await client.write(\n        pathFor(collection, id),\n        JSON.stringify({ value, version: expectedVersion + 1 }),\n        true,\n      );\n    },\n\n    async list(collection) {\n      const dir = `${prefix}/${collection}/`;\n      const paths = await client.listPaths(dir);\n      const entries: StoredEntry[] = [];\n      for (const pathname of paths) {\n        const id = pathname.slice(dir.length).replace(/\\.json$/u, \"\");\n        const record = await readRecord(collection, id);\n        if (record !== null) {\n          entries.push({ id, record });\n        }\n      }\n      return entries;\n    },\n  };\n}\n"],"mappings":";;;;;;;AAAA,SAAS,KAAK,MAAM,MAAM,WAAW;AAoBrC,SAAS,gBAAgB,OAAyB;AAChD,SACE,iBAAiB,UAChB,MAAM,SAAS,uBACd,kCAAkC,KAAK,MAAM,OAAO;AAE1D;AAEA,SAAS,qBAAqB,OAAyB;AACrD,SACE,iBAAiB,SACjB,sDAAsD,KAAK,MAAM,OAAO;AAE5E;AAEO,IAAM,mBAA+B;AAAA,EAC1C,MAAM,KAAK,UAAU;AACnB,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,KAAK,QAAQ,GAAG;AAAA,IAC/B,SAAS,OAAO;AACd,UAAI,gBAAgB,KAAK,GAAG;AAC1B,eAAO;AAAA,MACT;AACA,YAAM;AAAA,IACR;AACA,UAAM,SAAS,MAAM,IAAI,KAAK,EAAE,QAAQ,UAAU,CAAC;AACnD,QAAI,WAAW,MAAM;AACnB,aAAO;AAAA,IACT;AACA,WAAO,IAAI,SAAS,OAAO,MAAM,EAAE,KAAK;AAAA,EAC1C;AAAA,EAEA,MAAM,MAAM,UAAU,MAAM,WAAW;AACrC,UAAM,IAAI,UAAU,MAAM;AAAA,MACxB,QAAQ;AAAA,MACR,gBAAgB;AAAA,MAChB,aAAa;AAAA,IACf,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,UAAU,QAAQ;AACtB,UAAM,QAAkB,CAAC;AACzB,QAAI;AACJ,OAAG;AACD,YAAM,OAAO,MAAM,KAAK,EAAE,QAAQ,QAAQ,OAAO,IAAK,CAAC;AACvD,YAAM,KAAK,GAAG,KAAK,MAAM,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC;AACrD,eAAS,KAAK,UAAU,KAAK,SAAS;AAAA,IACxC,SAAS,WAAW;AACpB,WAAO;AAAA,EACT;AACF;AAgBO,SAAS,iBAAiB,UAA6B,CAAC,GAAgB;AAC7E,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,SAAS,QAAQ,UAAU;AAEjC,WAAS,QAAQ,YAA4B,IAAoB;AAC/D,WAAO,GAAG,MAAM,IAAI,UAAU,IAAI,EAAE;AAAA,EACtC;AAEA,iBAAe,WACb,YACA,IACqD;AACrD,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,OAAO,KAAK,QAAQ,YAAY,EAAE,CAAC;AAAA,IAClD,SAAS,OAAO;AACd,UAAI,gBAAgB,KAAK,GAAG;AAC1B,eAAO;AAAA,MACT;AACA,YAAM;AAAA,IACR;AACA,QAAI,SAAS,MAAM;AACjB,aAAO;AAAA,IACT;AACA,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,QAAI,OAAO,OAAO,YAAY,UAAU;AACtC,YAAM,IAAI,MAAM,8BAA8B,QAAQ,YAAY,EAAE,CAAC,EAAE;AAAA,IACzE;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IAEN,IAAI,YAAY,IAAI;AAClB,aAAO,WAAW,YAAY,EAAE;AAAA,IAClC;AAAA,IAEA,MAAM,OAAO,YAAY,IAAI,OAAO;AAClC,UAAI;AACF,cAAM,OAAO;AAAA,UACX,QAAQ,YAAY,EAAE;AAAA,UACtB,KAAK,UAAU,EAAE,OAAO,SAAS,EAAE,CAAC;AAAA,UACpC;AAAA,QACF;AAAA,MACF,SAAS,OAAO;AACd,YAAI,qBAAqB,KAAK,GAAG;AAC/B,gBAAM,IAAI,kBAAkB,YAAY,EAAE;AAAA,QAC5C;AACA,cAAM;AAAA,MACR;AAAA,IACF;AAAA,IAEA,MAAM,OAAO,YAAY,IAAI,OAAO,iBAAiB;AACnD,YAAM,WAAW,MAAM,WAAW,YAAY,EAAE;AAChD,UAAI,aAAa,MAAM;AACrB,cAAM,IAAI,oBAAoB,YAAY,EAAE;AAAA,MAC9C;AACA,UAAI,SAAS,YAAY,iBAAiB;AACxC,cAAM,IAAI,qBAAqB,YAAY,IAAI,eAAe;AAAA,MAChE;AACA,YAAM,OAAO;AAAA,QACX,QAAQ,YAAY,EAAE;AAAA,QACtB,KAAK,UAAU,EAAE,OAAO,SAAS,kBAAkB,EAAE,CAAC;AAAA,QACtD;AAAA,MACF;AAAA,IACF;AAAA,IAEA,MAAM,KAAK,YAAY;AACrB,YAAM,MAAM,GAAG,MAAM,IAAI,UAAU;AACnC,YAAM,QAAQ,MAAM,OAAO,UAAU,GAAG;AACxC,YAAM,UAAyB,CAAC;AAChC,iBAAW,YAAY,OAAO;AAC5B,cAAM,KAAK,SAAS,MAAM,IAAI,MAAM,EAAE,QAAQ,YAAY,EAAE;AAC5D,cAAM,SAAS,MAAM,WAAW,YAAY,EAAE;AAC9C,YAAI,WAAW,MAAM;AACnB,kBAAQ,KAAK,EAAE,IAAI,OAAO,CAAC;AAAA,QAC7B;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-CEF6VJZC.js

@@ -1,28 +0,0 @@
-// src/store/driver.ts
-var RecordExistsError = class extends Error {
-  constructor(collection, id) {
-    super(`record "${id}" already exists in "${collection}"`);
-    this.name = "RecordExistsError";
-  }
-};
-var RecordNotFoundError = class extends Error {
-  constructor(collection, id) {
-    super(`record "${id}" not found in "${collection}"`);
-    this.name = "RecordNotFoundError";
-  }
-};
-var VersionConflictError = class extends Error {
-  constructor(collection, id, expectedVersion) {
-    super(
-      `record "${id}" in "${collection}" changed since version ${expectedVersion} was read`
-    );
-    this.name = "VersionConflictError";
-  }
-};
-
-export {
-  RecordExistsError,
-  RecordNotFoundError,
-  VersionConflictError
-};
-//# sourceMappingURL=chunk-CEF6VJZC.js.map

package/dist/chunk-CEF6VJZC.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/store/driver.ts"],"sourcesContent":["export type CollectionName = \"repositories\" | \"signals\" | \"tasks\" | \"changes\" | \"receipts\";\n\nexport interface StoredRecord {\n  readonly value: unknown;\n  readonly version: number;\n}\n\nexport interface StoredEntry {\n  readonly id: string;\n  readonly record: StoredRecord;\n}\n\nexport class RecordExistsError extends Error {\n  constructor(collection: CollectionName, id: string) {\n    super(`record \"${id}\" already exists in \"${collection}\"`);\n    this.name = \"RecordExistsError\";\n  }\n}\n\nexport class RecordNotFoundError extends Error {\n  constructor(collection: CollectionName, id: string) {\n    super(`record \"${id}\" not found in \"${collection}\"`);\n    this.name = \"RecordNotFoundError\";\n  }\n}\n\nexport class VersionConflictError extends Error {\n  constructor(collection: CollectionName, id: string, expectedVersion: number) {\n    super(\n      `record \"${id}\" in \"${collection}\" changed since version ${expectedVersion} was read`,\n    );\n    this.name = \"VersionConflictError\";\n  }\n}\n\n/**\n * Raw persistence contract. Drivers store opaque values and enforce nothing\n * about their content; every invariant lives in the engine above. `update`\n * must be an atomic compare-and-swap on `expectedVersion`.\n */\nexport interface StoreDriver {\n  readonly name: string;\n  get(collection: CollectionName, id: string): Promise<StoredRecord | null>;\n  insert(collection: CollectionName, id: string, value: unknown): Promise<void>;\n  update(\n    collection: CollectionName,\n    id: string,\n    value: unknown,\n    expectedVersion: number,\n  ): Promise<void>;\n  list(collection: CollectionName): Promise<readonly StoredEntry[]>;\n}\n"],"mappings":";AAYO,IAAM,oBAAN,cAAgC,MAAM;AAAA,EAC3C,YAAY,YAA4B,IAAY;AAClD,UAAM,WAAW,EAAE,wBAAwB,UAAU,GAAG;AACxD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YAAY,YAA4B,IAAY;AAClD,UAAM,WAAW,EAAE,mBAAmB,UAAU,GAAG;AACnD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAC9C,YAAY,YAA4B,IAAY,iBAAyB;AAC3E;AAAA,MACE,WAAW,EAAE,SAAS,UAAU,2BAA2B,eAAe;AAAA,IAC5E;AACA,SAAK,OAAO;AAAA,EACd;AACF;","names":[]}

package/dist/chunk-LBEYCOSR.js

@@ -1,351 +0,0 @@
-import {
-  RecordNotFoundError
-} from "./chunk-CEF6VJZC.js";
-
-// src/schema/common.ts
-import { z } from "zod";
-var SCHEMA_VERSION = 1;
-var schemaVersionSchema = z.literal(SCHEMA_VERSION).describe("Version of the entity schema this row was written with.");
-var isoDateTimeSchema = z.iso.datetime().describe("UTC timestamp in ISO 8601 format, e.g. 2026-08-26T12:00:00Z.");
-var usdSchema = z.number().finite().nonnegative().describe("Amount in US dollars.");
-var vocabularySchema = z.string().regex(/^[a-z][a-z0-9_]{0,63}$/, "must be lowercase snake_case starting with a letter").describe("Lowercase snake_case name, e.g. github_issue or sentry_alert.");
-var replyToSchema = z.strictObject({
-  channel: z.string().min(1).describe("Connector that should carry replies, e.g. github or slack."),
-  address: z.string().min(1).describe("Connector-specific reply address, e.g. acme/web#41 or a Slack thread id.")
-});
-
-// src/schema/finding.ts
-import { createHash } from "crypto";
-import { z as z2 } from "zod";
-var findingPrioritySchema = z2.enum(["P0", "P1", "P2", "P3"]).describe("Urgency of a finding: P0 is drop-everything, P3 is nice-to-have.");
-var findingCategorySchema = z2.enum([
-  "security",
-  "correctness",
-  "reliability",
-  "performance",
-  "compatibility",
-  "accessibility",
-  "documentation",
-  "maintainability",
-  "testing",
-  "usability"
-]);
-var findingVerificationLevelSchema = z2.enum(["unverified", "supported", "confirmed"]).describe(
-  "How sure the reporter is: unverified = suspected from reading; supported = evidence points to it; confirmed = demonstrated."
-);
-var findingVerificationMethodSchema = z2.enum([
-  "code_inspection",
-  "static_analysis",
-  "manual_reproduction",
-  "unit_test",
-  "integration_test",
-  "e2e_test",
-  "runtime_observation",
-  "documentation"
-]);
-var findingVerificationSchema = z2.strictObject({
-  level: findingVerificationLevelSchema,
-  method: findingVerificationMethodSchema,
-  summary: z2.string().min(1).max(2e3).describe("What was checked and what it showed."),
-  limitations: z2.string().min(1).max(2e3).optional().describe("What could not be checked.")
-});
-var findingSchema = z2.strictObject({
-  title: z2.string().min(1).max(200),
-  body: z2.string().min(1).max(8e3).describe("The problem, its impact, and how to fix it. Markdown."),
-  path: z2.string().min(1).max(500).optional().describe("Repository-relative file path."),
-  line: z2.number().int().min(1).optional(),
-  endLine: z2.number().int().min(1).optional(),
-  priority: findingPrioritySchema,
-  category: findingCategorySchema,
-  verification: findingVerificationSchema,
-  tool: z2.string().min(1).max(100).optional().describe("Scanner that produced it, e.g. deepsec."),
-  ruleId: z2.string().min(1).max(200).optional().describe("Scanner rule or check id, when there is one.")
-});
-function findingFingerprint(repositoryId, finding) {
-  const parts = finding.tool !== void 0 && finding.ruleId !== void 0 && finding.path !== void 0 ? [repositoryId, finding.tool, finding.ruleId, finding.path] : [
-    repositoryId,
-    finding.tool ?? "",
-    finding.ruleId ?? "",
-    finding.path ?? "",
-    finding.title.trim().toLowerCase().replaceAll(/\s+/gu, " ")
-  ];
-  return createHash("sha256").update(parts.join(" ")).digest("hex").slice(0, 32);
-}
-
-// src/approval.ts
-import { z as z3 } from "zod";
-var approvalRuleSchema = z3.strictObject({
-  source: vocabularySchema.optional().describe("Signal source, e.g. security_scan or github_issue."),
-  kind: vocabularySchema.optional().describe("Task kind, e.g. code_change."),
-  priority: z3.array(findingPrioritySchema).min(1).optional().describe("Finding priorities the rule applies to."),
-  require: z3.boolean().describe("Whether matching tasks wait for a human before dispatch.")
-});
-var approvalPolicySchema = z3.array(approvalRuleSchema).describe("First-match rules deciding which tasks need a human before they run.");
-var defaultApprovalPolicy = [
-  { kind: "verification", require: false },
-  { source: "security_scan", require: true },
-  { require: false }
-];
-function requiresApproval(policy, subject) {
-  for (const rule of policy) {
-    if (rule.source !== void 0 && rule.source !== subject.source) continue;
-    if (rule.kind !== void 0 && rule.kind !== subject.kind) continue;
-    if (rule.priority !== void 0) {
-      if (subject.priority === void 0 || !rule.priority.includes(subject.priority)) continue;
-    }
-    return rule.require;
-  }
-  return false;
-}
-
-// src/schema/id.ts
-import { z as z4 } from "zod";
-function idSchema(prefix) {
-  return z4.string().regex(new RegExp(`^${prefix}_[a-z0-9]{6,64}$`));
-}
-var factoryIdSchema = idSchema("fac");
-var repositoryIdSchema = idSchema("repo");
-var signalIdSchema = idSchema("sig");
-var taskIdSchema = idSchema("task");
-var changeIdSchema = idSchema("chg");
-var receiptIdSchema = idSchema("rcpt");
-var repositoryIdsSchema = z4.array(repositoryIdSchema).min(1);
-
-// src/dispatch.ts
-var DispatchRefusedError = class extends Error {
-  taskId;
-  reason;
-  constructor(taskId, reason) {
-    super(`dispatch of "${taskId}" refused: ${reason}`);
-    this.name = "DispatchRefusedError";
-    this.taskId = taskId;
-    this.reason = reason;
-  }
-};
-async function dispatchTask(stores, taskId, options) {
-  const task = await stores.tasks.get(taskId);
-  if (task === null) {
-    throw new RecordNotFoundError("tasks", taskId);
-  }
-  if (task.kind === "question") {
-    throw new DispatchRefusedError(taskId, "question tasks are answered, not dispatched");
-  }
-  if (task.approval === "required") {
-    throw new DispatchRefusedError(taskId, "awaiting human approval");
-  }
-  if (task.approval === "denied") {
-    throw new DispatchRefusedError(taskId, "approval was denied");
-  }
-  for (const dependencyId of task.dependsOn ?? []) {
-    const dependency = await stores.tasks.get(dependencyId);
-    if (dependency === null) {
-      throw new DispatchRefusedError(taskId, `dependency "${dependencyId}" does not exist`);
-    }
-    if (dependency.changeId === void 0) {
-      throw new DispatchRefusedError(
-        taskId,
-        `dependency "${dependencyId}" has not produced a change`
-      );
-    }
-  }
-  const running = await stores.tasks.transition(taskId, "running");
-  try {
-    await options.launch(running);
-  } catch (error) {
-    const reason = (error instanceof Error ? error.message : String(error)).slice(0, 500);
-    await stores.tasks.transition(taskId, "failed", { reason: `launch failed: ${reason}` }).catch(() => void 0);
-    throw error;
-  }
-  return running;
-}
-
-// src/schema/change.ts
-import { z as z5 } from "zod";
-var levelSchema = z5.enum(["low", "medium", "high"]);
-var changeStateSchema = z5.enum([
-  "verifying",
-  "ready",
-  "merged",
-  "deployed",
-  "rolled_out",
-  "rolled_back",
-  "closed"
-]);
-var postMergeStates = ["merged", "deployed", "rolled_out", "rolled_back"];
-var changeEvidenceSchema = z5.strictObject({
-  reproVerified: z5.boolean(),
-  testsAdded: z5.number().int().min(0),
-  checksGreen: z5.boolean(),
-  attackPassed: z5.boolean(),
-  scopeMatches: z5.boolean(),
-  previewUrl: z5.url().optional()
-});
-var changeSchema = z5.strictObject({
-  schemaVersion: schemaVersionSchema,
-  id: changeIdSchema,
-  repositoryId: repositoryIdSchema,
-  taskId: taskIdSchema.optional(),
-  groupId: taskIdSchema.optional(),
-  prNumber: z5.number().int().min(1),
-  prUrl: z5.url(),
-  author: z5.string().min(1),
-  risk: levelSchema,
-  confidence: levelSchema,
-  evidence: changeEvidenceSchema,
-  state: changeStateSchema,
-  decidedBy: z5.string().min(1).optional(),
-  createdAt: isoDateTimeSchema,
-  updatedAt: isoDateTimeSchema
-}).superRefine((change, ctx) => {
-  if (postMergeStates.includes(change.state) && change.decidedBy === void 0) {
-    ctx.addIssue({
-      code: "custom",
-      path: ["decidedBy"],
-      message: `${change.state} changes require decidedBy`
-    });
-  }
-});
-
-// src/schema/task.ts
-import { z as z6 } from "zod";
-var standardTaskKinds = [
-  "code_change",
-  "verification",
-  "investigation",
-  "question"
-];
-var taskKindSchema = vocabularySchema.describe(
-  "What kind of work this is, e.g. code_change, question, or a registered custom kind."
-);
-var taskStateSchema = z6.enum(["queued", "running", "verifying", "succeeded", "failed", "needs_human", "cancelled"]).describe("Lifecycle state. Transitions are fixed; see taskTransitions.");
-var taskApprovalSchema = z6.enum(["required", "granted", "denied"]).describe(
-  "Human approval status. Absent means no approval is needed. Stamped required at creation by policy; granted or denied by an operator."
-);
-var harnessSchema = z6.string().min(1).describe("Coding harness used in the devbox, e.g. claude-code or codex.");
-var taskOriginSchema = z6.strictObject({
-  signalId: signalIdSchema.optional().describe("Signal that led to this task."),
-  parentTaskId: taskIdSchema.optional().describe("Parent task that planned this child."),
-  operator: z6.string().min(1).optional().describe("Human operator who requested it.")
-}).refine(
-  (origin) => origin.signalId !== void 0 || origin.parentTaskId !== void 0 || origin.operator !== void 0,
-  { message: "origin requires a signalId, parentTaskId, or operator" }
-);
-var taskDevboxSchema = z6.strictObject({
-  devboxId: z6.string().min(1).describe("Devbox running or having run this task."),
-  remoteId: z6.string().min(1).describe("Provider-side id of the execution."),
-  harness: harnessSchema
-});
-var taskQuestionSchema = z6.strictObject({
-  text: z6.string().min(1).describe("The question a human must answer."),
-  options: z6.array(z6.string().min(1)).describe("Suggested answers; free-text is also allowed."),
-  answer: z6.string().min(1).optional(),
-  answeredBy: z6.string().min(1).optional().describe("Authenticated operator who answered.")
-});
-var taskSchema = z6.strictObject({
-  schemaVersion: schemaVersionSchema,
-  id: taskIdSchema,
-  repositoryIds: repositoryIdsSchema.optional().describe("Repositories the task works on; absent only on a multi-repo parent."),
-  kind: taskKindSchema,
-  area: z6.string().min(1).optional().describe("Investigation area, e.g. onboarding or security. Investigation tasks only."),
-  state: taskStateSchema,
-  approval: taskApprovalSchema.optional(),
-  origin: taskOriginSchema,
-  dependsOn: z6.array(taskIdSchema).min(1).optional().describe("Sibling tasks that must produce a change before this one may run."),
-  replyTo: replyToSchema,
-  devbox: taskDevboxSchema.optional(),
-  attempt: z6.number().int().min(1).describe("Execution attempt, starting at 1; bumps on retry."),
-  reservedUsd: usdSchema.optional().describe("Budget reserved before dispatch."),
-  settledUsd: usdSchema.optional().describe("Measured cost settled after execution."),
-  question: taskQuestionSchema.optional(),
-  changeId: changeIdSchema.optional().describe("Change this code_change task produced."),
-  reportRef: z6.string().min(1).optional().describe("Reference to the report artifact an investigation produced."),
-  createdAt: isoDateTimeSchema,
-  updatedAt: isoDateTimeSchema
-}).superRefine((task, ctx) => {
-  if (task.area !== void 0 && task.kind !== "investigation") {
-    ctx.addIssue({
-      code: "custom",
-      path: ["area"],
-      message: "area is only valid on investigation tasks"
-    });
-  }
-  if (task.kind === "question") {
-    if (task.question === void 0) {
-      ctx.addIssue({
-        code: "custom",
-        path: ["question"],
-        message: "question tasks require a question"
-      });
-    }
-    if (task.devbox !== void 0) {
-      ctx.addIssue({
-        code: "custom",
-        path: ["devbox"],
-        message: "question tasks never run in a devbox"
-      });
-    }
-  } else if (task.question !== void 0) {
-    ctx.addIssue({
-      code: "custom",
-      path: ["question"],
-      message: "question is only valid on question tasks"
-    });
-  }
-  if (task.changeId !== void 0 && task.kind !== "code_change") {
-    ctx.addIssue({
-      code: "custom",
-      path: ["changeId"],
-      message: "changeId is only valid on code_change tasks"
-    });
-  }
-  if (task.reportRef !== void 0 && task.kind !== "investigation") {
-    ctx.addIssue({
-      code: "custom",
-      path: ["reportRef"],
-      message: "reportRef is only valid on investigation tasks"
-    });
-  }
-});
-
-export {
-  SCHEMA_VERSION,
-  schemaVersionSchema,
-  isoDateTimeSchema,
-  usdSchema,
-  vocabularySchema,
-  replyToSchema,
-  findingPrioritySchema,
-  findingCategorySchema,
-  findingVerificationLevelSchema,
-  findingVerificationMethodSchema,
-  findingVerificationSchema,
-  findingSchema,
-  findingFingerprint,
-  approvalRuleSchema,
-  approvalPolicySchema,
-  defaultApprovalPolicy,
-  requiresApproval,
-  factoryIdSchema,
-  repositoryIdSchema,
-  signalIdSchema,
-  taskIdSchema,
-  changeIdSchema,
-  receiptIdSchema,
-  repositoryIdsSchema,
-  DispatchRefusedError,
-  dispatchTask,
-  levelSchema,
-  changeStateSchema,
-  changeEvidenceSchema,
-  changeSchema,
-  standardTaskKinds,
-  taskKindSchema,
-  taskStateSchema,
-  taskApprovalSchema,
-  harnessSchema,
-  taskOriginSchema,
-  taskDevboxSchema,
-  taskQuestionSchema,
-  taskSchema
-};
-//# sourceMappingURL=chunk-LBEYCOSR.js.map

package/dist/chunk-LBEYCOSR.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/schema/common.ts","../src/schema/finding.ts","../src/approval.ts","../src/schema/id.ts","../src/dispatch.ts","../src/schema/change.ts","../src/schema/task.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const SCHEMA_VERSION = 1;\n\nexport const schemaVersionSchema = z\n  .literal(SCHEMA_VERSION)\n  .describe(\"Version of the entity schema this row was written with.\");\n\nexport const isoDateTimeSchema = z.iso\n  .datetime()\n  .describe(\"UTC timestamp in ISO 8601 format, e.g. 2026-08-26T12:00:00Z.\");\n\nexport const usdSchema = z.number().finite().nonnegative().describe(\"Amount in US dollars.\");\n\n/**\n * Open vocabulary value. Standard values ship as exported constants; custom\n * values matching the pattern are equally valid.\n */\nexport const vocabularySchema = z\n  .string()\n  .regex(/^[a-z][a-z0-9_]{0,63}$/, \"must be lowercase snake_case starting with a letter\")\n  .describe(\"Lowercase snake_case name, e.g. github_issue or sentry_alert.\");\n\nexport const replyToSchema = z.strictObject({\n  channel: z\n    .string()\n    .min(1)\n    .describe(\"Connector that should carry replies, e.g. github or slack.\"),\n  address: z\n    .string()\n    .min(1)\n    .describe(\"Connector-specific reply address, e.g. acme/web#41 or a Slack thread id.\"),\n});\n\nexport type ReplyTo = z.infer<typeof replyToSchema>;\n","import { createHash } from \"node:crypto\";\nimport { z } from \"zod\";\n\nexport const findingPrioritySchema = z\n  .enum([\"P0\", \"P1\", \"P2\", \"P3\"])\n  .describe(\"Urgency of a finding: P0 is drop-everything, P3 is nice-to-have.\");\n\nexport const findingCategorySchema = z.enum([\n  \"security\",\n  \"correctness\",\n  \"reliability\",\n  \"performance\",\n  \"compatibility\",\n  \"accessibility\",\n  \"documentation\",\n  \"maintainability\",\n  \"testing\",\n  \"usability\",\n]);\n\nexport const findingVerificationLevelSchema = z\n  .enum([\"unverified\", \"supported\", \"confirmed\"])\n  .describe(\n    \"How sure the reporter is: unverified = suspected from reading; supported = evidence points to it; confirmed = demonstrated.\",\n  );\n\nexport const findingVerificationMethodSchema = z.enum([\n  \"code_inspection\",\n  \"static_analysis\",\n  \"manual_reproduction\",\n  \"unit_test\",\n  \"integration_test\",\n  \"e2e_test\",\n  \"runtime_observation\",\n  \"documentation\",\n]);\n\n/**\n * What was done to check the finding. Forces a reporter to distinguish \"I\n * think this is a problem\" from \"I demonstrated it\", which is the axis a human\n * approving fixes cares about most.\n */\nexport const findingVerificationSchema = z.strictObject({\n  level: findingVerificationLevelSchema,\n  method: findingVerificationMethodSchema,\n  summary: z.string().min(1).max(2000).describe(\"What was checked and what it showed.\"),\n  limitations: z.string().min(1).max(2000).optional().describe(\"What could not be checked.\"),\n});\n\n/** A single problem found in a repository, as a scanner or agent reports it. */\nexport const findingSchema = z.strictObject({\n  title: z.string().min(1).max(200),\n  body: z.string().min(1).max(8000).describe(\"The problem, its impact, and how to fix it. Markdown.\"),\n  path: z.string().min(1).max(500).optional().describe(\"Repository-relative file path.\"),\n  line: z.number().int().min(1).optional(),\n  endLine: z.number().int().min(1).optional(),\n  priority: findingPrioritySchema,\n  category: findingCategorySchema,\n  verification: findingVerificationSchema,\n  tool: z.string().min(1).max(100).optional().describe(\"Scanner that produced it, e.g. deepsec.\"),\n  ruleId: z.string().min(1).max(200).optional().describe(\"Scanner rule or check id, when there is one.\"),\n});\n\nexport type FindingPriority = z.infer<typeof findingPrioritySchema>;\nexport type FindingCategory = z.infer<typeof findingCategorySchema>;\nexport type FindingVerification = z.infer<typeof findingVerificationSchema>;\nexport type Finding = z.infer<typeof findingSchema>;\n\n/**\n * Stable identity of a finding across scans, used as the signal's delivery id\n * so re-reporting is a no-op instead of a second task. A scanner finding is\n * the same problem when the same tool reports the same rule on the same file;\n * its title is model-written prose and changes between runs, so it is left\n * out. Without a rule id the title is all there is, normalised.\n */\nexport function findingFingerprint(repositoryId: string, finding: Finding): string {\n  const parts =\n    finding.tool !== undefined && finding.ruleId !== undefined && finding.path !== undefined\n      ? [repositoryId, finding.tool, finding.ruleId, finding.path]\n      : [\n          repositoryId,\n          finding.tool ?? \"\",\n          finding.ruleId ?? \"\",\n          finding.path ?? \"\",\n          finding.title.trim().toLowerCase().replaceAll(/\\s+/gu, \" \"),\n        ];\n  return createHash(\"sha256\").update(parts.join(\" \")).digest(\"hex\").slice(0, 32);\n}\n","import { z } from \"zod\";\nimport { vocabularySchema } from \"./schema/common\";\nimport { findingPrioritySchema, type FindingPriority } from \"./schema/finding\";\n\n/**\n * One approval rule. Every listed field must match for the rule to apply;\n * absent fields match anything. Rules are evaluated first-match.\n */\nexport const approvalRuleSchema = z.strictObject({\n  source: vocabularySchema.optional().describe(\"Signal source, e.g. security_scan or github_issue.\"),\n  kind: vocabularySchema.optional().describe(\"Task kind, e.g. code_change.\"),\n  priority: z\n    .array(findingPrioritySchema)\n    .min(1)\n    .optional()\n    .describe(\"Finding priorities the rule applies to.\"),\n  require: z.boolean().describe(\"Whether matching tasks wait for a human before dispatch.\"),\n});\n\nexport const approvalPolicySchema = z\n  .array(approvalRuleSchema)\n  .describe(\"First-match rules deciding which tasks need a human before they run.\");\n\nexport type ApprovalRule = z.infer<typeof approvalRuleSchema>;\nexport type ApprovalPolicy = z.infer<typeof approvalPolicySchema>;\n\n/**\n * The default: fixes for security findings wait for a human; everything else\n * runs as it always has. Handoffs between agents (verification) never wait,\n * because a human already approved the work they continue.\n */\nexport const defaultApprovalPolicy: ApprovalPolicy = [\n  { kind: \"verification\", require: false },\n  { source: \"security_scan\", require: true },\n  { require: false },\n];\n\nexport interface ApprovalSubject {\n  source?: string;\n  kind: string;\n  priority?: FindingPriority;\n}\n\n/**\n * Decide at task-creation time whether a task needs approval. Pure: the answer\n * is stamped on the task and never re-evaluated, so a later policy change\n * cannot silently release work a human was expecting to see.\n */\nexport function requiresApproval(policy: ApprovalPolicy, subject: ApprovalSubject): boolean {\n  for (const rule of policy) {\n    if (rule.source !== undefined && rule.source !== subject.source) continue;\n    if (rule.kind !== undefined && rule.kind !== subject.kind) continue;\n    if (rule.priority !== undefined) {\n      if (subject.priority === undefined || !rule.priority.includes(subject.priority)) continue;\n    }\n    return rule.require;\n  }\n  return false;\n}\n","import { z } from \"zod\";\n\nfunction idSchema(prefix: string) {\n  return z.string().regex(new RegExp(`^${prefix}_[a-z0-9]{6,64}$`));\n}\n\nexport const factoryIdSchema = idSchema(\"fac\");\nexport const repositoryIdSchema = idSchema(\"repo\");\nexport const signalIdSchema = idSchema(\"sig\");\nexport const taskIdSchema = idSchema(\"task\");\nexport const changeIdSchema = idSchema(\"chg\");\nexport const receiptIdSchema = idSchema(\"rcpt\");\n\nexport const repositoryIdsSchema = z.array(repositoryIdSchema).min(1);\n\nexport type FactoryId = z.infer<typeof factoryIdSchema>;\nexport type RepositoryId = z.infer<typeof repositoryIdSchema>;\nexport type SignalId = z.infer<typeof signalIdSchema>;\nexport type TaskId = z.infer<typeof taskIdSchema>;\nexport type ChangeId = z.infer<typeof changeIdSchema>;\nexport type ReceiptId = z.infer<typeof receiptIdSchema>;\n","import type { TaskId } from \"./schema/id\";\nimport type { Task } from \"./schema/task\";\nimport { RecordNotFoundError } from \"./store/driver\";\nimport type { FactoryStores } from \"./store/engine\";\n\nexport class DispatchRefusedError extends Error {\n  readonly taskId: TaskId;\n  readonly reason: string;\n\n  constructor(taskId: TaskId, reason: string) {\n    super(`dispatch of \"${taskId}\" refused: ${reason}`);\n    this.name = \"DispatchRefusedError\";\n    this.taskId = taskId;\n    this.reason = reason;\n  }\n}\n\nexport interface DispatchOptions {\n  /**\n   * Starts the durable execution for the task (an Eve agent run). Runs after\n   * the task has won the queued -> running transition. The execution owns its\n   * own provisioning: it creates its Devbox as its first step and patches the\n   * task record with the result.\n   */\n  launch: (task: Task) => Promise<void>;\n}\n\n/**\n * The handshake between recorded work and execution: win the store-gated\n * transition (at most one dispatcher can succeed), then start the run. A\n * launch failure moves the task to failed; a crash between the transition and\n * the launch leaves a running task with no execution, which the sweep reaps.\n */\nexport async function dispatchTask(\n  stores: FactoryStores,\n  taskId: TaskId,\n  options: DispatchOptions,\n): Promise<Task> {\n  const task = await stores.tasks.get(taskId);\n  if (task === null) {\n    throw new RecordNotFoundError(\"tasks\", taskId);\n  }\n  if (task.kind === \"question\") {\n    throw new DispatchRefusedError(taskId, \"question tasks are answered, not dispatched\");\n  }\n  if (task.approval === \"required\") {\n    throw new DispatchRefusedError(taskId, \"awaiting human approval\");\n  }\n  if (task.approval === \"denied\") {\n    throw new DispatchRefusedError(taskId, \"approval was denied\");\n  }\n  for (const dependencyId of task.dependsOn ?? []) {\n    const dependency = await stores.tasks.get(dependencyId);\n    if (dependency === null) {\n      throw new DispatchRefusedError(taskId, `dependency \"${dependencyId}\" does not exist`);\n    }\n    if (dependency.changeId === undefined) {\n      throw new DispatchRefusedError(\n        taskId,\n        `dependency \"${dependencyId}\" has not produced a change`,\n      );\n    }\n  }\n\n  const running = await stores.tasks.transition(taskId, \"running\");\n  try {\n    await options.launch(running);\n  } catch (error) {\n    const reason = (error instanceof Error ? error.message : String(error)).slice(0, 500);\n    await stores.tasks\n      .transition(taskId, \"failed\", { reason: `launch failed: ${reason}` })\n      .catch(() => undefined);\n    throw error;\n  }\n  return running;\n}\n","import { z } from \"zod\";\nimport { isoDateTimeSchema, schemaVersionSchema } from \"./common\";\nimport { changeIdSchema, repositoryIdSchema, taskIdSchema } from \"./id\";\n\nexport const levelSchema = z.enum([\"low\", \"medium\", \"high\"]);\n\nexport const changeStateSchema = z.enum([\n  \"verifying\",\n  \"ready\",\n  \"merged\",\n  \"deployed\",\n  \"rolled_out\",\n  \"rolled_back\",\n  \"closed\",\n]);\n\nconst postMergeStates: readonly string[] = [\"merged\", \"deployed\", \"rolled_out\", \"rolled_back\"];\n\nexport const changeEvidenceSchema = z.strictObject({\n  reproVerified: z.boolean(),\n  testsAdded: z.number().int().min(0),\n  checksGreen: z.boolean(),\n  attackPassed: z.boolean(),\n  scopeMatches: z.boolean(),\n  previewUrl: z.url().optional(),\n});\n\nexport const changeSchema = z\n  .strictObject({\n    schemaVersion: schemaVersionSchema,\n    id: changeIdSchema,\n    repositoryId: repositoryIdSchema,\n    taskId: taskIdSchema.optional(),\n    groupId: taskIdSchema.optional(),\n    prNumber: z.number().int().min(1),\n    prUrl: z.url(),\n    author: z.string().min(1),\n    risk: levelSchema,\n    confidence: levelSchema,\n    evidence: changeEvidenceSchema,\n    state: changeStateSchema,\n    decidedBy: z.string().min(1).optional(),\n    createdAt: isoDateTimeSchema,\n    updatedAt: isoDateTimeSchema,\n  })\n  .superRefine((change, ctx) => {\n    if (postMergeStates.includes(change.state) && change.decidedBy === undefined) {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"decidedBy\"],\n        message: `${change.state} changes require decidedBy`,\n      });\n    }\n  });\n\nexport type Level = z.infer<typeof levelSchema>;\nexport type ChangeState = z.infer<typeof changeStateSchema>;\nexport type ChangeEvidence = z.infer<typeof changeEvidenceSchema>;\nexport type Change = z.infer<typeof changeSchema>;\n","import { z } from \"zod\";\nimport {\n  isoDateTimeSchema,\n  replyToSchema,\n  schemaVersionSchema,\n  usdSchema,\n  vocabularySchema,\n} from \"./common\";\nimport { changeIdSchema, repositoryIdsSchema, signalIdSchema, taskIdSchema } from \"./id\";\n\n/**\n * Kinds the standard loop understands. Any vocabulary value is valid; the\n * kind-scoped rules below apply only to these standard kinds.\n */\nexport const standardTaskKinds = [\n  \"code_change\",\n  \"verification\",\n  \"investigation\",\n  \"question\",\n] as const;\n\nexport const taskKindSchema = vocabularySchema.describe(\n  \"What kind of work this is, e.g. code_change, question, or a registered custom kind.\",\n);\n\nexport const taskStateSchema = z\n  .enum([\"queued\", \"running\", \"verifying\", \"succeeded\", \"failed\", \"needs_human\", \"cancelled\"])\n  .describe(\"Lifecycle state. Transitions are fixed; see taskTransitions.\");\n\nexport const taskApprovalSchema = z\n  .enum([\"required\", \"granted\", \"denied\"])\n  .describe(\n    \"Human approval status. Absent means no approval is needed. Stamped required at creation by policy; granted or denied by an operator.\",\n  );\n\nexport const harnessSchema = z\n  .string()\n  .min(1)\n  .describe(\"Coding harness used in the devbox, e.g. claude-code or codex.\");\n\nexport const taskOriginSchema = z\n  .strictObject({\n    signalId: signalIdSchema.optional().describe(\"Signal that led to this task.\"),\n    parentTaskId: taskIdSchema.optional().describe(\"Parent task that planned this child.\"),\n    operator: z.string().min(1).optional().describe(\"Human operator who requested it.\"),\n  })\n  .refine(\n    (origin) =>\n      origin.signalId !== undefined ||\n      origin.parentTaskId !== undefined ||\n      origin.operator !== undefined,\n    { message: \"origin requires a signalId, parentTaskId, or operator\" },\n  );\n\nexport const taskDevboxSchema = z.strictObject({\n  devboxId: z.string().min(1).describe(\"Devbox running or having run this task.\"),\n  remoteId: z.string().min(1).describe(\"Provider-side id of the execution.\"),\n  harness: harnessSchema,\n});\n\nexport const taskQuestionSchema = z.strictObject({\n  text: z.string().min(1).describe(\"The question a human must answer.\"),\n  options: z.array(z.string().min(1)).describe(\"Suggested answers; free-text is also allowed.\"),\n  answer: z.string().min(1).optional(),\n  answeredBy: z.string().min(1).optional().describe(\"Authenticated operator who answered.\"),\n});\n\nexport const taskSchema = z\n  .strictObject({\n    schemaVersion: schemaVersionSchema,\n    id: taskIdSchema,\n    repositoryIds: repositoryIdsSchema\n      .optional()\n      .describe(\"Repositories the task works on; absent only on a multi-repo parent.\"),\n    kind: taskKindSchema,\n    area: z\n      .string()\n      .min(1)\n      .optional()\n      .describe(\"Investigation area, e.g. onboarding or security. Investigation tasks only.\"),\n    state: taskStateSchema,\n    approval: taskApprovalSchema.optional(),\n    origin: taskOriginSchema,\n    dependsOn: z\n      .array(taskIdSchema)\n      .min(1)\n      .optional()\n      .describe(\"Sibling tasks that must produce a change before this one may run.\"),\n    replyTo: replyToSchema,\n    devbox: taskDevboxSchema.optional(),\n    attempt: z\n      .number()\n      .int()\n      .min(1)\n      .describe(\"Execution attempt, starting at 1; bumps on retry.\"),\n    reservedUsd: usdSchema.optional().describe(\"Budget reserved before dispatch.\"),\n    settledUsd: usdSchema.optional().describe(\"Measured cost settled after execution.\"),\n    question: taskQuestionSchema.optional(),\n    changeId: changeIdSchema.optional().describe(\"Change this code_change task produced.\"),\n    reportRef: z\n      .string()\n      .min(1)\n      .optional()\n      .describe(\"Reference to the report artifact an investigation produced.\"),\n    createdAt: isoDateTimeSchema,\n    updatedAt: isoDateTimeSchema,\n  })\n  .superRefine((task, ctx) => {\n    if (task.area !== undefined && task.kind !== \"investigation\") {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"area\"],\n        message: \"area is only valid on investigation tasks\",\n      });\n    }\n    if (task.kind === \"question\") {\n      if (task.question === undefined) {\n        ctx.addIssue({\n          code: \"custom\",\n          path: [\"question\"],\n          message: \"question tasks require a question\",\n        });\n      }\n      if (task.devbox !== undefined) {\n        ctx.addIssue({\n          code: \"custom\",\n          path: [\"devbox\"],\n          message: \"question tasks never run in a devbox\",\n        });\n      }\n    } else if (task.question !== undefined) {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"question\"],\n        message: \"question is only valid on question tasks\",\n      });\n    }\n    if (task.changeId !== undefined && task.kind !== \"code_change\") {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"changeId\"],\n        message: \"changeId is only valid on code_change tasks\",\n      });\n    }\n    if (task.reportRef !== undefined && task.kind !== \"investigation\") {\n      ctx.addIssue({\n        code: \"custom\",\n        path: [\"reportRef\"],\n        message: \"reportRef is only valid on investigation tasks\",\n      });\n    }\n  });\n\nexport type TaskApproval = z.infer<typeof taskApprovalSchema>;\nexport type TaskKind = z.infer<typeof taskKindSchema>;\nexport type TaskState = z.infer<typeof taskStateSchema>;\nexport type Task = z.infer<typeof taskSchema>;\n"],"mappings":";;;;;AAAA,SAAS,SAAS;AAEX,IAAM,iBAAiB;AAEvB,IAAM,sBAAsB,EAChC,QAAQ,cAAc,EACtB,SAAS,yDAAyD;AAE9D,IAAM,oBAAoB,EAAE,IAChC,SAAS,EACT,SAAS,8DAA8D;AAEnE,IAAM,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,uBAAuB;AAMpF,IAAM,mBAAmB,EAC7B,OAAO,EACP,MAAM,0BAA0B,qDAAqD,EACrF,SAAS,+DAA+D;AAEpE,IAAM,gBAAgB,EAAE,aAAa;AAAA,EAC1C,SAAS,EACN,OAAO,EACP,IAAI,CAAC,EACL,SAAS,4DAA4D;AAAA,EACxE,SAAS,EACN,OAAO,EACP,IAAI,CAAC,EACL,SAAS,0EAA0E;AACxF,CAAC;;;AChCD,SAAS,kBAAkB;AAC3B,SAAS,KAAAA,UAAS;AAEX,IAAM,wBAAwBA,GAClC,KAAK,CAAC,MAAM,MAAM,MAAM,IAAI,CAAC,EAC7B,SAAS,kEAAkE;AAEvE,IAAM,wBAAwBA,GAAE,KAAK;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,iCAAiCA,GAC3C,KAAK,CAAC,cAAc,aAAa,WAAW,CAAC,EAC7C;AAAA,EACC;AACF;AAEK,IAAM,kCAAkCA,GAAE,KAAK;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAOM,IAAM,4BAA4BA,GAAE,aAAa;AAAA,EACtD,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,SAAS,sCAAsC;AAAA,EACpF,aAAaA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,SAAS,EAAE,SAAS,4BAA4B;AAC3F,CAAC;AAGM,IAAM,gBAAgBA,GAAE,aAAa;AAAA,EAC1C,OAAOA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAChC,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAI,EAAE,SAAS,uDAAuD;AAAA,EAClG,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS,gCAAgC;AAAA,EACrF,MAAMA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACvC,SAASA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC1C,UAAU;AAAA,EACV,UAAU;AAAA,EACV,cAAc;AAAA,EACd,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS,yCAAyC;AAAA,EAC9F,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,SAAS,8CAA8C;AACvG,CAAC;AAcM,SAAS,mBAAmB,cAAsB,SAA0B;AACjF,QAAM,QACJ,QAAQ,SAAS,UAAa,QAAQ,WAAW,UAAa,QAAQ,SAAS,SAC3E,CAAC,cAAc,QAAQ,MAAM,QAAQ,QAAQ,QAAQ,IAAI,IACzD;AAAA,IACE;AAAA,IACA,QAAQ,QAAQ;AAAA,IAChB,QAAQ,UAAU;AAAA,IAClB,QAAQ,QAAQ;AAAA,IAChB,QAAQ,MAAM,KAAK,EAAE,YAAY,EAAE,WAAW,SAAS,GAAG;AAAA,EAC5D;AACN,SAAO,WAAW,QAAQ,EAAE,OAAO,MAAM,KAAK,GAAG,CAAC,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAC/E;;;ACvFA,SAAS,KAAAC,UAAS;AAQX,IAAM,qBAAqBC,GAAE,aAAa;AAAA,EAC/C,QAAQ,iBAAiB,SAAS,EAAE,SAAS,oDAAoD;AAAA,EACjG,MAAM,iBAAiB,SAAS,EAAE,SAAS,8BAA8B;AAAA,EACzE,UAAUA,GACP,MAAM,qBAAqB,EAC3B,IAAI,CAAC,EACL,SAAS,EACT,SAAS,yCAAyC;AAAA,EACrD,SAASA,GAAE,QAAQ,EAAE,SAAS,0DAA0D;AAC1F,CAAC;AAEM,IAAM,uBAAuBA,GACjC,MAAM,kBAAkB,EACxB,SAAS,sEAAsE;AAU3E,IAAM,wBAAwC;AAAA,EACnD,EAAE,MAAM,gBAAgB,SAAS,MAAM;AAAA,EACvC,EAAE,QAAQ,iBAAiB,SAAS,KAAK;AAAA,EACzC,EAAE,SAAS,MAAM;AACnB;AAaO,SAAS,iBAAiB,QAAwB,SAAmC;AAC1F,aAAW,QAAQ,QAAQ;AACzB,QAAI,KAAK,WAAW,UAAa,KAAK,WAAW,QAAQ,OAAQ;AACjE,QAAI,KAAK,SAAS,UAAa,KAAK,SAAS,QAAQ,KAAM;AAC3D,QAAI,KAAK,aAAa,QAAW;AAC/B,UAAI,QAAQ,aAAa,UAAa,CAAC,KAAK,SAAS,SAAS,QAAQ,QAAQ,EAAG;AAAA,IACnF;AACA,WAAO,KAAK;AAAA,EACd;AACA,SAAO;AACT;;;AC1DA,SAAS,KAAAC,UAAS;AAElB,SAAS,SAAS,QAAgB;AAChC,SAAOA,GAAE,OAAO,EAAE,MAAM,IAAI,OAAO,IAAI,MAAM,kBAAkB,CAAC;AAClE;AAEO,IAAM,kBAAkB,SAAS,KAAK;AACtC,IAAM,qBAAqB,SAAS,MAAM;AAC1C,IAAM,iBAAiB,SAAS,KAAK;AACrC,IAAM,eAAe,SAAS,MAAM;AACpC,IAAM,iBAAiB,SAAS,KAAK;AACrC,IAAM,kBAAkB,SAAS,MAAM;AAEvC,IAAM,sBAAsBA,GAAE,MAAM,kBAAkB,EAAE,IAAI,CAAC;;;ACR7D,IAAM,uBAAN,cAAmC,MAAM;AAAA,EACrC;AAAA,EACA;AAAA,EAET,YAAY,QAAgB,QAAgB;AAC1C,UAAM,gBAAgB,MAAM,cAAc,MAAM,EAAE;AAClD,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,SAAS;AAAA,EAChB;AACF;AAkBA,eAAsB,aACpB,QACA,QACA,SACe;AACf,QAAM,OAAO,MAAM,OAAO,MAAM,IAAI,MAAM;AAC1C,MAAI,SAAS,MAAM;AACjB,UAAM,IAAI,oBAAoB,SAAS,MAAM;AAAA,EAC/C;AACA,MAAI,KAAK,SAAS,YAAY;AAC5B,UAAM,IAAI,qBAAqB,QAAQ,6CAA6C;AAAA,EACtF;AACA,MAAI,KAAK,aAAa,YAAY;AAChC,UAAM,IAAI,qBAAqB,QAAQ,yBAAyB;AAAA,EAClE;AACA,MAAI,KAAK,aAAa,UAAU;AAC9B,UAAM,IAAI,qBAAqB,QAAQ,qBAAqB;AAAA,EAC9D;AACA,aAAW,gBAAgB,KAAK,aAAa,CAAC,GAAG;AAC/C,UAAM,aAAa,MAAM,OAAO,MAAM,IAAI,YAAY;AACtD,QAAI,eAAe,MAAM;AACvB,YAAM,IAAI,qBAAqB,QAAQ,eAAe,YAAY,kBAAkB;AAAA,IACtF;AACA,QAAI,WAAW,aAAa,QAAW;AACrC,YAAM,IAAI;AAAA,QACR;AAAA,QACA,eAAe,YAAY;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,OAAO,MAAM,WAAW,QAAQ,SAAS;AAC/D,MAAI;AACF,UAAM,QAAQ,OAAO,OAAO;AAAA,EAC9B,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GAAG,MAAM,GAAG,GAAG;AACpF,UAAM,OAAO,MACV,WAAW,QAAQ,UAAU,EAAE,QAAQ,kBAAkB,MAAM,GAAG,CAAC,EACnE,MAAM,MAAM,MAAS;AACxB,UAAM;AAAA,EACR;AACA,SAAO;AACT;;;AC3EA,SAAS,KAAAC,UAAS;AAIX,IAAM,cAAcC,GAAE,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC;AAEpD,IAAM,oBAAoBA,GAAE,KAAK;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,kBAAqC,CAAC,UAAU,YAAY,cAAc,aAAa;AAEtF,IAAM,uBAAuBA,GAAE,aAAa;AAAA,EACjD,eAAeA,GAAE,QAAQ;AAAA,EACzB,YAAYA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EAClC,aAAaA,GAAE,QAAQ;AAAA,EACvB,cAAcA,GAAE,QAAQ;AAAA,EACxB,cAAcA,GAAE,QAAQ;AAAA,EACxB,YAAYA,GAAE,IAAI,EAAE,SAAS;AAC/B,CAAC;AAEM,IAAM,eAAeA,GACzB,aAAa;AAAA,EACZ,eAAe;AAAA,EACf,IAAI;AAAA,EACJ,cAAc;AAAA,EACd,QAAQ,aAAa,SAAS;AAAA,EAC9B,SAAS,aAAa,SAAS;AAAA,EAC/B,UAAUA,GAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EAChC,OAAOA,GAAE,IAAI;AAAA,EACb,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,MAAM;AAAA,EACN,YAAY;AAAA,EACZ,UAAU;AAAA,EACV,OAAO;AAAA,EACP,WAAWA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACtC,WAAW;AAAA,EACX,WAAW;AACb,CAAC,EACA,YAAY,CAAC,QAAQ,QAAQ;AAC5B,MAAI,gBAAgB,SAAS,OAAO,KAAK,KAAK,OAAO,cAAc,QAAW;AAC5E,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,WAAW;AAAA,MAClB,SAAS,GAAG,OAAO,KAAK;AAAA,IAC1B,CAAC;AAAA,EACH;AACF,CAAC;;;ACrDH,SAAS,KAAAC,UAAS;AAcX,IAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,iBAAiB,iBAAiB;AAAA,EAC7C;AACF;AAEO,IAAM,kBAAkBC,GAC5B,KAAK,CAAC,UAAU,WAAW,aAAa,aAAa,UAAU,eAAe,WAAW,CAAC,EAC1F,SAAS,8DAA8D;AAEnE,IAAM,qBAAqBA,GAC/B,KAAK,CAAC,YAAY,WAAW,QAAQ,CAAC,EACtC;AAAA,EACC;AACF;AAEK,IAAM,gBAAgBA,GAC1B,OAAO,EACP,IAAI,CAAC,EACL,SAAS,+DAA+D;AAEpE,IAAM,mBAAmBA,GAC7B,aAAa;AAAA,EACZ,UAAU,eAAe,SAAS,EAAE,SAAS,+BAA+B;AAAA,EAC5E,cAAc,aAAa,SAAS,EAAE,SAAS,sCAAsC;AAAA,EACrF,UAAUA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,kCAAkC;AACpF,CAAC,EACA;AAAA,EACC,CAAC,WACC,OAAO,aAAa,UACpB,OAAO,iBAAiB,UACxB,OAAO,aAAa;AAAA,EACtB,EAAE,SAAS,wDAAwD;AACrE;AAEK,IAAM,mBAAmBA,GAAE,aAAa;AAAA,EAC7C,UAAUA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,yCAAyC;AAAA,EAC9E,UAAUA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,oCAAoC;AAAA,EACzE,SAAS;AACX,CAAC;AAEM,IAAM,qBAAqBA,GAAE,aAAa;AAAA,EAC/C,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,mCAAmC;AAAA,EACpE,SAASA,GAAE,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,+CAA+C;AAAA,EAC5F,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACnC,YAAYA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,sCAAsC;AAC1F,CAAC;AAEM,IAAM,aAAaA,GACvB,aAAa;AAAA,EACZ,eAAe;AAAA,EACf,IAAI;AAAA,EACJ,eAAe,oBACZ,SAAS,EACT,SAAS,qEAAqE;AAAA,EACjF,MAAM;AAAA,EACN,MAAMA,GACH,OAAO,EACP,IAAI,CAAC,EACL,SAAS,EACT,SAAS,4EAA4E;AAAA,EACxF,OAAO;AAAA,EACP,UAAU,mBAAmB,SAAS;AAAA,EACtC,QAAQ;AAAA,EACR,WAAWA,GACR,MAAM,YAAY,EAClB,IAAI,CAAC,EACL,SAAS,EACT,SAAS,mEAAmE;AAAA,EAC/E,SAAS;AAAA,EACT,QAAQ,iBAAiB,SAAS;AAAA,EAClC,SAASA,GACN,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,SAAS,mDAAmD;AAAA,EAC/D,aAAa,UAAU,SAAS,EAAE,SAAS,kCAAkC;AAAA,EAC7E,YAAY,UAAU,SAAS,EAAE,SAAS,wCAAwC;AAAA,EAClF,UAAU,mBAAmB,SAAS;AAAA,EACtC,UAAU,eAAe,SAAS,EAAE,SAAS,wCAAwC;AAAA,EACrF,WAAWA,GACR,OAAO,EACP,IAAI,CAAC,EACL,SAAS,EACT,SAAS,6DAA6D;AAAA,EACzE,WAAW;AAAA,EACX,WAAW;AACb,CAAC,EACA,YAAY,CAAC,MAAM,QAAQ;AAC1B,MAAI,KAAK,SAAS,UAAa,KAAK,SAAS,iBAAiB;AAC5D,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,MAAM;AAAA,MACb,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,KAAK,SAAS,YAAY;AAC5B,QAAI,KAAK,aAAa,QAAW;AAC/B,UAAI,SAAS;AAAA,QACX,MAAM;AAAA,QACN,MAAM,CAAC,UAAU;AAAA,QACjB,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AACA,QAAI,KAAK,WAAW,QAAW;AAC7B,UAAI,SAAS;AAAA,QACX,MAAM;AAAA,QACN,MAAM,CAAC,QAAQ;AAAA,QACf,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF,WAAW,KAAK,aAAa,QAAW;AACtC,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,UAAU;AAAA,MACjB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,KAAK,aAAa,UAAa,KAAK,SAAS,eAAe;AAC9D,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,UAAU;AAAA,MACjB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,KAAK,cAAc,UAAa,KAAK,SAAS,iBAAiB;AACjE,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,WAAW;AAAA,MAClB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;","names":["z","z","z","z","z","z","z","z"]}

package/dist/common-CaHaEOAS.d.ts

@@ -1,18 +0,0 @@
-import { z } from 'zod';
-
-declare const SCHEMA_VERSION = 1;
-declare const schemaVersionSchema: z.ZodLiteral<1>;
-declare const isoDateTimeSchema: z.ZodISODateTime;
-declare const usdSchema: z.ZodNumber;
-/**
- * Open vocabulary value. Standard values ship as exported constants; custom
- * values matching the pattern are equally valid.
- */
-declare const vocabularySchema: z.ZodString;
-declare const replyToSchema: z.ZodObject<{
-    channel: z.ZodString;
-    address: z.ZodString;
-}, z.core.$strict>;
-type ReplyTo = z.infer<typeof replyToSchema>;
-
-export { type ReplyTo as R, SCHEMA_VERSION as S, isoDateTimeSchema as i, replyToSchema as r, schemaVersionSchema as s, usdSchema as u, vocabularySchema as v };

package/dist/connectors/github.d.ts

@@ -1,62 +0,0 @@
-import { R as ReplyTo } from '../common-CaHaEOAS.js';
-import 'zod';
-
-/**
- * Verify a GitHub webhook HMAC signature (the x-hub-signature-256 header)
- * against the raw request body. Returns false for missing or malformed
- * signatures instead of throwing.
- */
-declare function verifyGitHubSignature(options: {
-    secret: string;
-    payload: string;
-    signature: string | null;
-}): boolean;
-interface GitHubIssueSignal {
-    source: "github_issue";
-    deliveryId: string;
-    repositorySlug: string;
-    replyTo: ReplyTo;
-    issue: {
-        number: number;
-        title: string;
-        body: string | null;
-    };
-    payload: unknown;
-}
-interface GitHubCIFailureSignal {
-    source: "github_ci_failure";
-    deliveryId: string;
-    repositoryDefaultBranch: string;
-    repositorySlug: string;
-    replyTo: ReplyTo;
-    workflowRun: {
-        id: number;
-        name: string;
-        trigger: string;
-        branch: string | null;
-        headRepositorySlug: string | null;
-        headSha: string;
-        url: string;
-        conclusion: string;
-        attempt: number;
-    };
-    payload: unknown;
-}
-/**
- * Normalize a GitHub issues webhook into the factory's signal shape. Returns
- * null for payloads that are not an opened issue. The caller supplies the
- * repository id; the payload stays untrusted data.
- */
-declare function normalizeGitHubIssueOpened(options: {
-    deliveryId: string;
-    event: string;
-    payload: unknown;
-}): GitHubIssueSignal | null;
-/** Normalize a completed, unsuccessful GitHub Actions run into a CI failure signal. */
-declare function normalizeGitHubWorkflowRunFailure(options: {
-    deliveryId: string;
-    event: string;
-    payload: unknown;
-}): GitHubCIFailureSignal | null;
-
-export { type GitHubCIFailureSignal, type GitHubIssueSignal, normalizeGitHubIssueOpened, normalizeGitHubWorkflowRunFailure, verifyGitHubSignature };

package/dist/connectors/github.js

@@ -1,112 +0,0 @@
-// src/connectors/github.ts
-import { createHmac, timingSafeEqual } from "crypto";
-import { z } from "zod";
-function verifyGitHubSignature(options) {
-  const { secret, payload, signature } = options;
-  if (signature === null || !signature.startsWith("sha256=")) {
-    return false;
-  }
-  const expected = createHmac("sha256", secret).update(payload).digest("hex");
-  const provided = signature.slice("sha256=".length);
-  if (provided.length !== expected.length) {
-    return false;
-  }
-  return timingSafeEqual(Buffer.from(provided, "hex"), Buffer.from(expected, "hex"));
-}
-var issueEventSchema = z.looseObject({
-  action: z.string(),
-  issue: z.looseObject({
-    number: z.number().int().min(1),
-    title: z.string(),
-    body: z.string().nullable()
-  }),
-  repository: z.looseObject({
-    full_name: z.string().min(1)
-  })
-});
-var failedWorkflowConclusions = /* @__PURE__ */ new Set([
-  "action_required",
-  "failure",
-  "stale",
-  "startup_failure",
-  "timed_out"
-]);
-var workflowRunEventSchema = z.looseObject({
-  action: z.string(),
-  repository: z.looseObject({
-    default_branch: z.string().min(1),
-    full_name: z.string().min(1)
-  }),
-  workflow_run: z.looseObject({
-    id: z.number().int().min(1),
-    name: z.string().min(1),
-    event: z.string().min(1),
-    head_branch: z.string().min(1).nullable(),
-    head_repository: z.looseObject({
-      full_name: z.string().min(1)
-    }).nullable(),
-    head_sha: z.string().min(1),
-    html_url: z.url(),
-    conclusion: z.string().nullable(),
-    run_attempt: z.number().int().min(1)
-  })
-});
-function normalizeGitHubIssueOpened(options) {
-  if (options.event !== "issues") {
-    return null;
-  }
-  const parsed = issueEventSchema.safeParse(options.payload);
-  if (!parsed.success || parsed.data.action !== "opened") {
-    return null;
-  }
-  const slug = parsed.data.repository.full_name.toLowerCase();
-  const { number, title, body } = parsed.data.issue;
-  return {
-    source: "github_issue",
-    deliveryId: options.deliveryId,
-    repositorySlug: slug,
-    replyTo: { channel: "github", address: `${slug}#${number}` },
-    issue: { number, title, body },
-    payload: options.payload
-  };
-}
-function normalizeGitHubWorkflowRunFailure(options) {
-  if (options.event !== "workflow_run") {
-    return null;
-  }
-  const parsed = workflowRunEventSchema.safeParse(options.payload);
-  if (!parsed.success || parsed.data.action !== "completed") {
-    return null;
-  }
-  const run = parsed.data.workflow_run;
-  const conclusion = run.conclusion;
-  if (conclusion === null || !failedWorkflowConclusions.has(conclusion)) {
-    return null;
-  }
-  const slug = parsed.data.repository.full_name.toLowerCase();
-  return {
-    source: "github_ci_failure",
-    deliveryId: options.deliveryId,
-    repositoryDefaultBranch: parsed.data.repository.default_branch,
-    repositorySlug: slug,
-    replyTo: { channel: "github", address: `${slug}/actions/runs/${run.id}` },
-    workflowRun: {
-      id: run.id,
-      name: run.name,
-      trigger: run.event,
-      branch: run.head_branch,
-      headRepositorySlug: run.head_repository?.full_name.toLowerCase() ?? null,
-      headSha: run.head_sha,
-      url: run.html_url,
-      conclusion,
-      attempt: run.run_attempt
-    },
-    payload: options.payload
-  };
-}
-export {
-  normalizeGitHubIssueOpened,
-  normalizeGitHubWorkflowRunFailure,
-  verifyGitHubSignature
-};
-//# sourceMappingURL=github.js.map