@vercel/factory 0.0.3 → 0.0.5

package/dist/github.mjs

@@ -0,0 +1,332 @@
+import { z } from "zod";
+import { createHmac, timingSafeEqual } from "node:crypto";
+//#region src/github.ts
+const gitHubApiUrl = "https://api.github.com";
+const repositorySlugPattern = /^[^/\s]+\/[^/\s]+$/;
+const pullRequestSchema = z.object({
+	number: z.number().int().positive(),
+	html_url: z.url()
+});
+const pullRequestHeadSchema = z.object({ head: z.object({
+	ref: z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._/-]*$/).refine((value) => !value.includes("..")),
+	sha: z.string().regex(/^[0-9a-f]{40}$/),
+	repo: z.object({ full_name: z.string().min(1) })
+}) });
+const reviewCommentSchema = z.object({
+	id: z.number().int().positive(),
+	body: z.string(),
+	html_url: z.url(),
+	user: z.object({ login: z.string().min(1) }),
+	in_reply_to_id: z.number().int().positive().nullish()
+});
+const labelsSchema = z.array(z.object({ name: z.string().min(1) }));
+const pullRequestCandidateSchema = z.object({
+	number: z.number().int().positive(),
+	user: z.object({ type: z.string().min(1) }),
+	head: z.object({
+		ref: z.string().min(1),
+		repo: z.object({ full_name: z.string().min(1) })
+	})
+});
+const openPullRequestsSchema = z.array(pullRequestCandidateSchema);
+const pullRequestDetailSchema = pullRequestCandidateSchema.extend({
+	html_url: z.url(),
+	mergeable: z.boolean().nullable(),
+	mergeable_state: z.string().min(1),
+	head: pullRequestCandidateSchema.shape.head.extend({ sha: z.string().min(1) }),
+	base: z.object({
+		ref: z.string().min(1),
+		sha: z.string().min(1)
+	})
+});
+const collaboratorPermissionSchema = z.object({ permission: z.enum([
+	"admin",
+	"maintain",
+	"write",
+	"triage",
+	"read",
+	"none"
+]) });
+const writePermissions = /* @__PURE__ */ new Set([
+	"admin",
+	"maintain",
+	"write"
+]);
+var GitHubReviewCommentAuthorError = class extends Error {
+	author;
+	constructor(author) {
+		super(`GitHub user ${author} does not have write access to the repository`);
+		this.name = "GitHubReviewCommentAuthorError";
+		this.author = author;
+	}
+};
+/** Create a pull request from an existing head branch. */
+async function createPullRequest(input) {
+	const pull = pullRequestSchema.parse(await gitHubRequest(input, "/pulls", {
+		method: "POST",
+		body: JSON.stringify({
+			title: input.title,
+			head: input.head,
+			base: input.base,
+			...input.body === void 0 ? {} : { body: input.body },
+			...input.draft === void 0 ? {} : { draft: input.draft }
+		})
+	}));
+	return {
+		prNumber: pull.number,
+		prUrl: pull.html_url
+	};
+}
+/** Read one inline review comment after applying the author policy, which requires write access by default. */
+async function readReviewComment(input) {
+	const comment = parseReviewComment(await gitHubRequest(input, `/pulls/comments/${positiveInteger(input.commentId, "commentId")}`));
+	await assertReviewCommentAuthor(input, comment.author);
+	return comment;
+}
+/** Reply to an inline review comment after applying the author policy, which requires write access by default. */
+async function answerReviewComment(input) {
+	await readReviewComment(input);
+	return parseReviewComment(await gitHubRequest(input, `/pulls/${positiveInteger(input.pullRequestNumber, "pullRequestNumber")}/comments/${positiveInteger(input.commentId, "commentId")}/replies`, {
+		method: "POST",
+		body: JSON.stringify({ body: input.body })
+	}));
+}
+/** Read the current head branch and commit of a pull request. */
+async function readPullRequestHead(input) {
+	const pull = pullRequestHeadSchema.parse(await gitHubRequest(input, `/pulls/${positiveInteger(input.pullRequestNumber, "pullRequestNumber")}`));
+	return {
+		branch: pull.head.ref,
+		sha: pull.head.sha,
+		repository: pull.head.repo.full_name.toLowerCase()
+	};
+}
+/** List open, same-repository pull requests by one author that GitHub reports as conflicting. */
+async function listConflictedPullRequests(input) {
+	const candidates = openPullRequestsSchema.parse(await gitHubRequest(input, `/pulls?state=open&per_page=100`)).filter((pull) => pull.user.type === "Bot" && pull.head.ref.startsWith("factory/") && pull.head.repo.full_name.toLowerCase() === input.repository.toLowerCase());
+	const conflicted = [];
+	for (const candidate of candidates) {
+		const pull = pullRequestDetailSchema.parse(await gitHubRequest(input, `/pulls/${candidate.number}`));
+		if (pull.mergeable === false || pull.mergeable_state === "dirty") conflicted.push({
+			prNumber: pull.number,
+			prUrl: pull.html_url,
+			headBranch: pull.head.ref,
+			headSha: pull.head.sha,
+			baseBranch: pull.base.ref,
+			baseSha: pull.base.sha
+		});
+	}
+	return conflicted;
+}
+/** Add one label to a pull request. */
+async function addLabel(input) {
+	return parseLabels(await gitHubRequest(input, `/issues/${positiveInteger(input.pullRequestNumber, "pullRequestNumber")}/labels`, {
+		method: "POST",
+		body: JSON.stringify({ labels: [input.label] })
+	}));
+}
+/** Remove one label from a pull request. */
+async function removeLabel(input) {
+	return parseLabels(await gitHubRequest(input, `/issues/${positiveInteger(input.pullRequestNumber, "pullRequestNumber")}/labels/${encodeURIComponent(input.label)}`, { method: "DELETE" }));
+}
+async function gitHubRequest(input, path, init = {}) {
+	if (!repositorySlugPattern.test(input.repository)) throw new Error(`invalid GitHub repository slug: ${input.repository}`);
+	const response = await (input.fetch ?? globalThis.fetch)(`${gitHubApiUrl}/repos/${input.repository}${path}`, {
+		...init,
+		headers: {
+			Accept: "application/vnd.github+json",
+			Authorization: `Bearer ${input.token}`,
+			"Content-Type": "application/json",
+			"X-GitHub-Api-Version": "2022-11-28",
+			...init.headers
+		}
+	});
+	const body = await response.json();
+	if (!response.ok) {
+		const message = z.object({ message: z.string() }).safeParse(body);
+		throw new Error(`GitHub API request failed (${response.status}): ${message.success ? message.data.message : response.statusText}`);
+	}
+	return body;
+}
+function parseReviewComment(value) {
+	const comment = reviewCommentSchema.parse(value);
+	return {
+		id: comment.id,
+		body: comment.body,
+		url: comment.html_url,
+		author: comment.user.login,
+		inReplyToId: comment.in_reply_to_id ?? null
+	};
+}
+function parseLabels(value) {
+	return labelsSchema.parse(value).map(({ name }) => name);
+}
+async function assertReviewCommentAuthor(input, author) {
+	if (input.authorPolicy === "any") return;
+	const { permission } = collaboratorPermissionSchema.parse(await gitHubRequest(input, `/collaborators/${encodeURIComponent(author)}/permission`));
+	if (!writePermissions.has(permission)) throw new GitHubReviewCommentAuthorError(author);
+}
+function positiveInteger(value, name) {
+	if (!Number.isInteger(value) || value < 1) throw new Error(`${name} must be a positive integer`);
+	return value;
+}
+/**
+* Verify a GitHub webhook HMAC signature (the x-hub-signature-256 header)
+* against the raw request body. Returns false for missing or malformed
+* signatures instead of throwing.
+*/
+function verifyGitHubSignature(options) {
+	const { secret, payload, signature } = options;
+	if (signature === null || !signature.startsWith("sha256=")) return false;
+	const expected = createHmac("sha256", secret).update(payload).digest("hex");
+	const provided = signature.slice(7);
+	if (provided.length !== expected.length) return false;
+	return timingSafeEqual(Buffer.from(provided, "hex"), Buffer.from(expected, "hex"));
+}
+const pushEventSchema = z.looseObject({
+	ref: z.string().min(1),
+	repository: z.looseObject({
+		default_branch: z.string().min(1),
+		full_name: z.string().min(1)
+	})
+});
+/** Normalize a push to a repository's default branch for deterministic reconciliation. */
+function normalizeGitHubDefaultBranchPush(options) {
+	if (options.event !== "push") return null;
+	const parsed = pushEventSchema.safeParse(options.payload);
+	if (!parsed.success || parsed.data.ref !== `refs/heads/${parsed.data.repository.default_branch}`) return null;
+	return {
+		source: "github_default_branch_push",
+		deliveryId: options.deliveryId,
+		repositorySlug: parsed.data.repository.full_name.toLowerCase(),
+		defaultBranch: parsed.data.repository.default_branch
+	};
+}
+const issueEventSchema = z.looseObject({
+	action: z.string(),
+	issue: z.looseObject({
+		number: z.number().int().min(1),
+		title: z.string(),
+		body: z.string().nullable()
+	}),
+	repository: z.looseObject({ full_name: z.string().min(1) })
+});
+const failedWorkflowConclusions = /* @__PURE__ */ new Set([
+	"action_required",
+	"failure",
+	"stale",
+	"startup_failure",
+	"timed_out"
+]);
+const workflowRunEventSchema = z.looseObject({
+	action: z.string(),
+	repository: z.looseObject({
+		default_branch: z.string().min(1),
+		full_name: z.string().min(1)
+	}),
+	workflow_run: z.looseObject({
+		id: z.number().int().min(1),
+		name: z.string().min(1),
+		event: z.string().min(1),
+		head_branch: z.string().min(1).nullable(),
+		head_repository: z.looseObject({ full_name: z.string().min(1) }).nullable(),
+		head_sha: z.string().min(1),
+		html_url: z.url(),
+		conclusion: z.string().nullable(),
+		run_attempt: z.number().int().min(1)
+	})
+});
+/**
+* Normalize a GitHub issues webhook into the factory's signal shape. Returns
+* null for payloads that are not an opened issue. The caller supplies the
+* repository id; the payload stays untrusted data.
+*/
+function normalizeGitHubIssueOpened(options) {
+	if (options.event !== "issues") return null;
+	const parsed = issueEventSchema.safeParse(options.payload);
+	if (!parsed.success || parsed.data.action !== "opened") return null;
+	const slug = parsed.data.repository.full_name.toLowerCase();
+	const { number, title, body } = parsed.data.issue;
+	return {
+		source: "github_issue",
+		deliveryId: options.deliveryId,
+		repositorySlug: slug,
+		replyTo: {
+			channel: "github",
+			address: `${slug}#${number}`
+		},
+		issue: {
+			number,
+			title,
+			body
+		},
+		payload: options.payload
+	};
+}
+const pullRequestClosedSchema = z.looseObject({
+	action: z.string(),
+	pull_request: z.looseObject({
+		number: z.number().int().min(1),
+		html_url: z.url(),
+		merged: z.boolean(),
+		merged_by: z.looseObject({ login: z.string().min(1) }).nullable().optional()
+	}),
+	repository: z.looseObject({ full_name: z.string().min(1) }),
+	sender: z.looseObject({ login: z.string().min(1) })
+});
+/**
+* Normalize a closed pull_request webhook so the factory can observe what
+* happened to its change: merged records merged_by (the sender when GitHub
+* omits it), a close without merge records the sender.
+*/
+function normalizeGitHubPullRequestClosed(options) {
+	if (options.event !== "pull_request") return null;
+	const parsed = pullRequestClosedSchema.safeParse(options.payload);
+	if (!parsed.success || parsed.data.action !== "closed") return null;
+	const pr = parsed.data.pull_request;
+	const sender = parsed.data.sender.login;
+	return {
+		source: "github_pull_request_closed",
+		deliveryId: options.deliveryId,
+		repositorySlug: parsed.data.repository.full_name.toLowerCase(),
+		prNumber: pr.number,
+		prUrl: pr.html_url,
+		merged: pr.merged,
+		decidedBy: pr.merged ? pr.merged_by?.login ?? sender : sender
+	};
+}
+/** Normalize a completed, unsuccessful GitHub Actions run into a CI failure signal. */
+function normalizeGitHubWorkflowRunFailure(options) {
+	if (options.event !== "workflow_run") return null;
+	const parsed = workflowRunEventSchema.safeParse(options.payload);
+	if (!parsed.success || parsed.data.action !== "completed") return null;
+	const run = parsed.data.workflow_run;
+	const conclusion = run.conclusion;
+	if (conclusion === null || !failedWorkflowConclusions.has(conclusion)) return null;
+	const slug = parsed.data.repository.full_name.toLowerCase();
+	return {
+		source: "github_ci_failure",
+		deliveryId: options.deliveryId,
+		repositoryDefaultBranch: parsed.data.repository.default_branch,
+		repositorySlug: slug,
+		replyTo: {
+			channel: "github",
+			address: `${slug}/actions/runs/${run.id}`
+		},
+		workflowRun: {
+			id: run.id,
+			name: run.name,
+			trigger: run.event,
+			branch: run.head_branch,
+			headRepositorySlug: run.head_repository?.full_name.toLowerCase() ?? null,
+			headSha: run.head_sha,
+			url: run.html_url,
+			conclusion,
+			attempt: run.run_attempt
+		},
+		payload: options.payload
+	};
+}
+//#endregion
+export { GitHubReviewCommentAuthorError, addLabel, answerReviewComment, createPullRequest, listConflictedPullRequests, normalizeGitHubDefaultBranchPush, normalizeGitHubIssueOpened, normalizeGitHubPullRequestClosed, normalizeGitHubWorkflowRunFailure, readPullRequestHead, readReviewComment, removeLabel, verifyGitHubSignature };
+
+//# sourceMappingURL=github.mjs.map

package/dist/github.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.mjs","names":[],"sources":["../src/github.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from \"node:crypto\";\nimport { z } from \"zod\";\nimport type { NormalizedSignal, WebhookEvent } from \"./connectors/index\";\n\nconst gitHubApiUrl = \"https://api.github.com\";\nconst repositorySlugPattern = /^[^/\\s]+\\/[^/\\s]+$/;\n\nexport interface GitHubRepositoryRequest {\n  repository: string;\n  token: string;\n  fetch?: typeof globalThis.fetch;\n}\n\nexport interface CreatePullRequestInput extends GitHubRepositoryRequest {\n  title: string;\n  head: string;\n  base: string;\n  body?: string;\n  draft?: boolean;\n}\n\nexport interface CreatedPullRequest {\n  prNumber: number;\n  prUrl: string;\n}\n\nexport type ReviewCommentAuthorPolicy = \"write\" | \"any\";\n\ninterface ReviewCommentTrustInput {\n  /** Defaults to `write`. Use `any` only when untrusted review text is handled as data. */\n  authorPolicy?: ReviewCommentAuthorPolicy;\n}\n\nexport interface ReadReviewCommentInput extends GitHubRepositoryRequest, ReviewCommentTrustInput {\n  commentId: number;\n}\n\nexport interface GitHubReviewComment {\n  id: number;\n  body: string;\n  url: string;\n  author: string;\n  inReplyToId: number | null;\n}\n\nexport interface AnswerReviewCommentInput\n  extends GitHubRepositoryRequest,\n    ReviewCommentTrustInput {\n  pullRequestNumber: number;\n  commentId: number;\n  body: string;\n}\n\nexport interface ReadPullRequestHeadInput extends GitHubRepositoryRequest {\n  pullRequestNumber: number;\n}\n\nexport interface GitHubPullRequestHead {\n  branch: string;\n  sha: string;\n  repository: string;\n}\n\nexport interface PullRequestLabelInput extends GitHubRepositoryRequest {\n  pullRequestNumber: number;\n  label: string;\n}\n\nexport interface ConflictedPullRequest {\n  prNumber: number;\n  prUrl: string;\n  headBranch: string;\n  headSha: string;\n  baseBranch: string;\n  baseSha: string;\n}\n\nexport type ListConflictedPullRequestsInput = GitHubRepositoryRequest;\n\nconst pullRequestSchema = z.object({\n  number: z.number().int().positive(),\n  html_url: z.url(),\n});\n\nconst pullRequestHeadSchema = z.object({\n  head: z.object({\n    ref: z\n      .string()\n      .regex(/^[A-Za-z0-9][A-Za-z0-9._/-]*$/)\n      .refine((value) => !value.includes(\"..\")),\n    sha: z.string().regex(/^[0-9a-f]{40}$/),\n    repo: z.object({ full_name: z.string().min(1) }),\n  }),\n});\n\nconst reviewCommentSchema = z.object({\n  id: z.number().int().positive(),\n  body: z.string(),\n  html_url: z.url(),\n  user: z.object({ login: z.string().min(1) }),\n  in_reply_to_id: z.number().int().positive().nullish(),\n});\n\nconst labelsSchema = z.array(z.object({ name: z.string().min(1) }));\nconst pullRequestCandidateSchema = z.object({\n  number: z.number().int().positive(),\n  user: z.object({ type: z.string().min(1) }),\n  head: z.object({ ref: z.string().min(1), repo: z.object({ full_name: z.string().min(1) }) }),\n});\nconst openPullRequestsSchema = z.array(pullRequestCandidateSchema);\nconst pullRequestDetailSchema = pullRequestCandidateSchema.extend({\n  html_url: z.url(),\n  mergeable: z.boolean().nullable(),\n  mergeable_state: z.string().min(1),\n  head: pullRequestCandidateSchema.shape.head.extend({ sha: z.string().min(1) }),\n  base: z.object({ ref: z.string().min(1), sha: z.string().min(1) }),\n});\nconst collaboratorPermissionSchema = z.object({\n  permission: z.enum([\"admin\", \"maintain\", \"write\", \"triage\", \"read\", \"none\"]),\n});\nconst writePermissions = new Set([\"admin\", \"maintain\", \"write\"]);\n\nexport class GitHubReviewCommentAuthorError extends Error {\n  readonly author: string;\n\n  constructor(author: string) {\n    super(`GitHub user ${author} does not have write access to the repository`);\n    this.name = \"GitHubReviewCommentAuthorError\";\n    this.author = author;\n  }\n}\n\n/** Create a pull request from an existing head branch. */\nexport async function createPullRequest(input: CreatePullRequestInput): Promise<CreatedPullRequest> {\n  const pull = pullRequestSchema.parse(\n    await gitHubRequest(input, \"/pulls\", {\n      method: \"POST\",\n      body: JSON.stringify({\n        title: input.title,\n        head: input.head,\n        base: input.base,\n        ...(input.body === undefined ? {} : { body: input.body }),\n        ...(input.draft === undefined ? {} : { draft: input.draft }),\n      }),\n    }),\n  );\n  return { prNumber: pull.number, prUrl: pull.html_url };\n}\n\n/** Read one inline review comment after applying the author policy, which requires write access by default. */\nexport async function readReviewComment(\n  input: ReadReviewCommentInput,\n): Promise<GitHubReviewComment> {\n  const comment = parseReviewComment(\n    await gitHubRequest(input, `/pulls/comments/${positiveInteger(input.commentId, \"commentId\")}`),\n  );\n  await assertReviewCommentAuthor(input, comment.author);\n  return comment;\n}\n\n/** Reply to an inline review comment after applying the author policy, which requires write access by default. */\nexport async function answerReviewComment(\n  input: AnswerReviewCommentInput,\n): Promise<GitHubReviewComment> {\n  await readReviewComment(input);\n  return parseReviewComment(\n    await gitHubRequest(\n      input,\n      `/pulls/${positiveInteger(input.pullRequestNumber, \"pullRequestNumber\")}/comments/${positiveInteger(input.commentId, \"commentId\")}/replies`,\n      { method: \"POST\", body: JSON.stringify({ body: input.body }) },\n    ),\n  );\n}\n\n/** Read the current head branch and commit of a pull request. */\nexport async function readPullRequestHead(\n  input: ReadPullRequestHeadInput,\n): Promise<GitHubPullRequestHead> {\n  const pull = pullRequestHeadSchema.parse(\n    await gitHubRequest(input, `/pulls/${positiveInteger(input.pullRequestNumber, \"pullRequestNumber\")}`),\n  );\n  return {\n    branch: pull.head.ref,\n    sha: pull.head.sha,\n    repository: pull.head.repo.full_name.toLowerCase(),\n  };\n}\n\n/** List open, same-repository pull requests by one author that GitHub reports as conflicting. */\nexport async function listConflictedPullRequests(\n  input: ListConflictedPullRequestsInput,\n): Promise<ConflictedPullRequest[]> {\n  const pulls = openPullRequestsSchema.parse(\n    await gitHubRequest(input, `/pulls?state=open&per_page=100`),\n  );\n  const candidates = pulls.filter(\n    (pull) =>\n      pull.user.type === \"Bot\" &&\n      pull.head.ref.startsWith(\"factory/\") &&\n      pull.head.repo.full_name.toLowerCase() === input.repository.toLowerCase(),\n  );\n  const conflicted: ConflictedPullRequest[] = [];\n  for (const candidate of candidates) {\n    const pull = pullRequestDetailSchema.parse(\n      await gitHubRequest(input, `/pulls/${candidate.number}`),\n    );\n    if (pull.mergeable === false || pull.mergeable_state === \"dirty\") {\n      conflicted.push({\n        prNumber: pull.number,\n        prUrl: pull.html_url,\n        headBranch: pull.head.ref,\n        headSha: pull.head.sha,\n        baseBranch: pull.base.ref,\n        baseSha: pull.base.sha,\n      });\n    }\n  }\n  return conflicted;\n}\n\n/** Add one label to a pull request. */\nexport async function addLabel(input: PullRequestLabelInput): Promise<string[]> {\n  return parseLabels(\n    await gitHubRequest(\n      input,\n      `/issues/${positiveInteger(input.pullRequestNumber, \"pullRequestNumber\")}/labels`,\n      { method: \"POST\", body: JSON.stringify({ labels: [input.label] }) },\n    ),\n  );\n}\n\n/** Remove one label from a pull request. */\nexport async function removeLabel(input: PullRequestLabelInput): Promise<string[]> {\n  return parseLabels(\n    await gitHubRequest(\n      input,\n      `/issues/${positiveInteger(input.pullRequestNumber, \"pullRequestNumber\")}/labels/${encodeURIComponent(input.label)}`,\n      { method: \"DELETE\" },\n    ),\n  );\n}\n\nasync function gitHubRequest(\n  input: GitHubRepositoryRequest,\n  path: string,\n  init: RequestInit = {},\n): Promise<unknown> {\n  if (!repositorySlugPattern.test(input.repository)) {\n    throw new Error(`invalid GitHub repository slug: ${input.repository}`);\n  }\n  const response = await (input.fetch ?? globalThis.fetch)(\n    `${gitHubApiUrl}/repos/${input.repository}${path}`,\n    {\n      ...init,\n      headers: {\n        Accept: \"application/vnd.github+json\",\n        Authorization: `Bearer ${input.token}`,\n        \"Content-Type\": \"application/json\",\n        \"X-GitHub-Api-Version\": \"2022-11-28\",\n        ...init.headers,\n      },\n    },\n  );\n  const body: unknown = await response.json();\n  if (!response.ok) {\n    const message = z.object({ message: z.string() }).safeParse(body);\n    throw new Error(\n      `GitHub API request failed (${response.status}): ${message.success ? message.data.message : response.statusText}`,\n    );\n  }\n  return body;\n}\n\nfunction parseReviewComment(value: unknown): GitHubReviewComment {\n  const comment = reviewCommentSchema.parse(value);\n  return {\n    id: comment.id,\n    body: comment.body,\n    url: comment.html_url,\n    author: comment.user.login,\n    inReplyToId: comment.in_reply_to_id ?? null,\n  };\n}\n\nfunction parseLabels(value: unknown): string[] {\n  return labelsSchema.parse(value).map(({ name }) => name);\n}\n\nasync function assertReviewCommentAuthor(\n  input: GitHubRepositoryRequest & ReviewCommentTrustInput,\n  author: string,\n): Promise<void> {\n  if (input.authorPolicy === \"any\") {\n    return;\n  }\n  const { permission } = collaboratorPermissionSchema.parse(\n    await gitHubRequest(input, `/collaborators/${encodeURIComponent(author)}/permission`),\n  );\n  if (!writePermissions.has(permission)) {\n    throw new GitHubReviewCommentAuthorError(author);\n  }\n}\n\nfunction positiveInteger(value: number, name: string): number {\n  if (!Number.isInteger(value) || value < 1) {\n    throw new Error(`${name} must be a positive integer`);\n  }\n  return value;\n}\n\n/**\n * Verify a GitHub webhook HMAC signature (the x-hub-signature-256 header)\n * against the raw request body. Returns false for missing or malformed\n * signatures instead of throwing.\n */\nexport function verifyGitHubSignature(options: {\n  secret: string;\n  payload: string;\n  signature: string | null;\n}): boolean {\n  const { secret, payload, signature } = options;\n  if (signature === null || !signature.startsWith(\"sha256=\")) {\n    return false;\n  }\n  const expected = createHmac(\"sha256\", secret).update(payload).digest(\"hex\");\n  const provided = signature.slice(\"sha256=\".length);\n  if (provided.length !== expected.length) {\n    return false;\n  }\n  return timingSafeEqual(Buffer.from(provided, \"hex\"), Buffer.from(expected, \"hex\"));\n}\n\nconst pushEventSchema = z.looseObject({\n  ref: z.string().min(1),\n  repository: z.looseObject({\n    default_branch: z.string().min(1),\n    full_name: z.string().min(1),\n  }),\n});\n\nexport interface GitHubDefaultBranchPush {\n  source: \"github_default_branch_push\";\n  deliveryId: string;\n  repositorySlug: string;\n  defaultBranch: string;\n}\n\n/** Normalize a push to a repository's default branch for deterministic reconciliation. */\nexport function normalizeGitHubDefaultBranchPush(options: {\n  deliveryId: string;\n  event: string;\n  payload: unknown;\n}): GitHubDefaultBranchPush | null {\n  if (options.event !== \"push\") return null;\n  const parsed = pushEventSchema.safeParse(options.payload);\n  if (!parsed.success || parsed.data.ref !== `refs/heads/${parsed.data.repository.default_branch}`) {\n    return null;\n  }\n  return {\n    source: \"github_default_branch_push\",\n    deliveryId: options.deliveryId,\n    repositorySlug: parsed.data.repository.full_name.toLowerCase(),\n    defaultBranch: parsed.data.repository.default_branch,\n  };\n}\n\nconst issueEventSchema = z.looseObject({\n  action: z.string(),\n  issue: z.looseObject({\n    number: z.number().int().min(1),\n    title: z.string(),\n    body: z.string().nullable(),\n  }),\n  repository: z.looseObject({\n    full_name: z.string().min(1),\n  }),\n});\n\nexport interface GitHubIssueSignal extends NormalizedSignal<\"github_issue\"> {\n  repositorySlug: string;\n  issue: { number: number; title: string; body: string | null };\n}\n\nconst failedWorkflowConclusions = new Set([\n  \"action_required\",\n  \"failure\",\n  \"stale\",\n  \"startup_failure\",\n  \"timed_out\",\n]);\n\nconst workflowRunEventSchema = z.looseObject({\n  action: z.string(),\n  repository: z.looseObject({\n    default_branch: z.string().min(1),\n    full_name: z.string().min(1),\n  }),\n  workflow_run: z.looseObject({\n    id: z.number().int().min(1),\n    name: z.string().min(1),\n    event: z.string().min(1),\n    head_branch: z.string().min(1).nullable(),\n    head_repository: z\n      .looseObject({\n        full_name: z.string().min(1),\n      })\n      .nullable(),\n    head_sha: z.string().min(1),\n    html_url: z.url(),\n    conclusion: z.string().nullable(),\n    run_attempt: z.number().int().min(1),\n  }),\n});\n\nexport interface GitHubCIFailureSignal extends NormalizedSignal<\"github_ci_failure\"> {\n  repositoryDefaultBranch: string;\n  repositorySlug: string;\n  workflowRun: {\n    id: number;\n    name: string;\n    trigger: string;\n    branch: string | null;\n    headRepositorySlug: string | null;\n    headSha: string;\n    url: string;\n    conclusion: string;\n    attempt: number;\n  };\n}\n\n/**\n * Normalize a GitHub issues webhook into the factory's signal shape. Returns\n * null for payloads that are not an opened issue. The caller supplies the\n * repository id; the payload stays untrusted data.\n */\nexport function normalizeGitHubIssueOpened(options: WebhookEvent): GitHubIssueSignal | null {\n  if (options.event !== \"issues\") {\n    return null;\n  }\n  const parsed = issueEventSchema.safeParse(options.payload);\n  if (!parsed.success || parsed.data.action !== \"opened\") {\n    return null;\n  }\n  const slug = parsed.data.repository.full_name.toLowerCase();\n  const { number, title, body } = parsed.data.issue;\n  return {\n    source: \"github_issue\",\n    deliveryId: options.deliveryId,\n    repositorySlug: slug,\n    replyTo: { channel: \"github\", address: `${slug}#${number}` },\n    issue: { number, title, body },\n    payload: options.payload,\n  };\n}\n\nconst pullRequestClosedSchema = z.looseObject({\n  action: z.string(),\n  pull_request: z.looseObject({\n    number: z.number().int().min(1),\n    html_url: z.url(),\n    merged: z.boolean(),\n    merged_by: z.looseObject({ login: z.string().min(1) }).nullable().optional(),\n  }),\n  repository: z.looseObject({\n    full_name: z.string().min(1),\n  }),\n  sender: z.looseObject({ login: z.string().min(1) }),\n});\n\nexport interface GitHubPullRequestClosed {\n  source: \"github_pull_request_closed\";\n  deliveryId: string;\n  repositorySlug: string;\n  prNumber: number;\n  prUrl: string;\n  merged: boolean;\n  /** The GitHub login that merged the pull request, or closed it without merging. */\n  decidedBy: string;\n}\n\n/**\n * Normalize a closed pull_request webhook so the factory can observe what\n * happened to its change: merged records merged_by (the sender when GitHub\n * omits it), a close without merge records the sender.\n */\nexport function normalizeGitHubPullRequestClosed(\n  options: WebhookEvent,\n): GitHubPullRequestClosed | null {\n  if (options.event !== \"pull_request\") {\n    return null;\n  }\n  const parsed = pullRequestClosedSchema.safeParse(options.payload);\n  if (!parsed.success || parsed.data.action !== \"closed\") {\n    return null;\n  }\n  const pr = parsed.data.pull_request;\n  const sender = parsed.data.sender.login;\n  return {\n    source: \"github_pull_request_closed\",\n    deliveryId: options.deliveryId,\n    repositorySlug: parsed.data.repository.full_name.toLowerCase(),\n    prNumber: pr.number,\n    prUrl: pr.html_url,\n    merged: pr.merged,\n    decidedBy: pr.merged ? (pr.merged_by?.login ?? sender) : sender,\n  };\n}\n\n/** Normalize a completed, unsuccessful GitHub Actions run into a CI failure signal. */\nexport function normalizeGitHubWorkflowRunFailure(\n  options: WebhookEvent,\n): GitHubCIFailureSignal | null {\n  if (options.event !== \"workflow_run\") {\n    return null;\n  }\n  const parsed = workflowRunEventSchema.safeParse(options.payload);\n  if (!parsed.success || parsed.data.action !== \"completed\") {\n    return null;\n  }\n\n  const run = parsed.data.workflow_run;\n  const conclusion = run.conclusion;\n  if (conclusion === null || !failedWorkflowConclusions.has(conclusion)) {\n    return null;\n  }\n  const slug = parsed.data.repository.full_name.toLowerCase();\n  return {\n    source: \"github_ci_failure\",\n    deliveryId: options.deliveryId,\n    repositoryDefaultBranch: parsed.data.repository.default_branch,\n    repositorySlug: slug,\n    replyTo: { channel: \"github\", address: `${slug}/actions/runs/${run.id}` },\n    workflowRun: {\n      id: run.id,\n      name: run.name,\n      trigger: run.event,\n      branch: run.head_branch,\n      headRepositorySlug: run.head_repository?.full_name.toLowerCase() ?? null,\n      headSha: run.head_sha,\n      url: run.html_url,\n      conclusion,\n      attempt: run.run_attempt,\n    },\n    payload: options.payload,\n  };\n}\n"],"mappings":";;;AAIA,MAAM,eAAe;AACrB,MAAM,wBAAwB;AA0E9B,MAAM,oBAAoB,EAAE,OAAO;CACjC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CAClC,UAAU,EAAE,IAAI;AAClB,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO,EACrC,MAAM,EAAE,OAAO;CACb,KAAK,EACF,OAAO,CAAC,CACR,MAAM,+BAA+B,CAAC,CACtC,QAAQ,UAAU,CAAC,MAAM,SAAS,IAAI,CAAC;CAC1C,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,gBAAgB;CACtC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACjD,CAAC,EACH,CAAC;AAED,MAAM,sBAAsB,EAAE,OAAO;CACnC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CAC9B,MAAM,EAAE,OAAO;CACf,UAAU,EAAE,IAAI;CAChB,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;CAC3C,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ;AACtD,CAAC;AAED,MAAM,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClE,MAAM,6BAA6B,EAAE,OAAO;CAC1C,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CAClC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;CAC1C,MAAM,EAAE,OAAO;EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;EAAG,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;CAAE,CAAC;AAC7F,CAAC;AACD,MAAM,yBAAyB,EAAE,MAAM,0BAA0B;AACjE,MAAM,0BAA0B,2BAA2B,OAAO;CAChE,UAAU,EAAE,IAAI;CAChB,WAAW,EAAE,QAAQ,CAAC,CAAC,SAAS;CAChC,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACjC,MAAM,2BAA2B,MAAM,KAAK,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;CAC7E,MAAM,EAAE,OAAO;EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;EAAG,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CAAE,CAAC;AACnE,CAAC;AACD,MAAM,+BAA+B,EAAE,OAAO,EAC5C,YAAY,EAAE,KAAK;CAAC;CAAS;CAAY;CAAS;CAAU;CAAQ;AAAM,CAAC,EAC7E,CAAC;AACD,MAAM,mCAAmB,IAAI,IAAI;CAAC;CAAS;CAAY;AAAO,CAAC;AAE/D,IAAa,iCAAb,cAAoD,MAAM;CACxD;CAEA,YAAY,QAAgB;EAC1B,MAAM,eAAe,OAAO,8CAA8C;EAC1E,KAAK,OAAO;EACZ,KAAK,SAAS;CAChB;AACF;;AAGA,eAAsB,kBAAkB,OAA4D;CAClG,MAAM,OAAO,kBAAkB,MAC7B,MAAM,cAAc,OAAO,UAAU;EACnC,QAAQ;EACR,MAAM,KAAK,UAAU;GACnB,OAAO,MAAM;GACb,MAAM,MAAM;GACZ,MAAM,MAAM;GACZ,GAAI,MAAM,SAAS,KAAA,IAAY,CAAC,IAAI,EAAE,MAAM,MAAM,KAAK;GACvD,GAAI,MAAM,UAAU,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO,MAAM,MAAM;EAC5D,CAAC;CACH,CAAC,CACH;CACA,OAAO;EAAE,UAAU,KAAK;EAAQ,OAAO,KAAK;CAAS;AACvD;;AAGA,eAAsB,kBACpB,OAC8B;CAC9B,MAAM,UAAU,mBACd,MAAM,cAAc,OAAO,mBAAmB,gBAAgB,MAAM,WAAW,WAAW,GAAG,CAC/F;CACA,MAAM,0BAA0B,OAAO,QAAQ,MAAM;CACrD,OAAO;AACT;;AAGA,eAAsB,oBACpB,OAC8B;CAC9B,MAAM,kBAAkB,KAAK;CAC7B,OAAO,mBACL,MAAM,cACJ,OACA,UAAU,gBAAgB,MAAM,mBAAmB,mBAAmB,EAAE,YAAY,gBAAgB,MAAM,WAAW,WAAW,EAAE,WAClI;EAAE,QAAQ;EAAQ,MAAM,KAAK,UAAU,EAAE,MAAM,MAAM,KAAK,CAAC;CAAE,CAC/D,CACF;AACF;;AAGA,eAAsB,oBACpB,OACgC;CAChC,MAAM,OAAO,sBAAsB,MACjC,MAAM,cAAc,OAAO,UAAU,gBAAgB,MAAM,mBAAmB,mBAAmB,GAAG,CACtG;CACA,OAAO;EACL,QAAQ,KAAK,KAAK;EAClB,KAAK,KAAK,KAAK;EACf,YAAY,KAAK,KAAK,KAAK,UAAU,YAAY;CACnD;AACF;;AAGA,eAAsB,2BACpB,OACkC;CAIlC,MAAM,aAHQ,uBAAuB,MACnC,MAAM,cAAc,OAAO,gCAAgC,CAEtC,CAAC,CAAC,QACtB,SACC,KAAK,KAAK,SAAS,SACnB,KAAK,KAAK,IAAI,WAAW,UAAU,KACnC,KAAK,KAAK,KAAK,UAAU,YAAY,MAAM,MAAM,WAAW,YAAY,CAC5E;CACA,MAAM,aAAsC,CAAC;CAC7C,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,OAAO,wBAAwB,MACnC,MAAM,cAAc,OAAO,UAAU,UAAU,QAAQ,CACzD;EACA,IAAI,KAAK,cAAc,SAAS,KAAK,oBAAoB,SACvD,WAAW,KAAK;GACd,UAAU,KAAK;GACf,OAAO,KAAK;GACZ,YAAY,KAAK,KAAK;GACtB,SAAS,KAAK,KAAK;GACnB,YAAY,KAAK,KAAK;GACtB,SAAS,KAAK,KAAK;EACrB,CAAC;CAEL;CACA,OAAO;AACT;;AAGA,eAAsB,SAAS,OAAiD;CAC9E,OAAO,YACL,MAAM,cACJ,OACA,WAAW,gBAAgB,MAAM,mBAAmB,mBAAmB,EAAE,UACzE;EAAE,QAAQ;EAAQ,MAAM,KAAK,UAAU,EAAE,QAAQ,CAAC,MAAM,KAAK,EAAE,CAAC;CAAE,CACpE,CACF;AACF;;AAGA,eAAsB,YAAY,OAAiD;CACjF,OAAO,YACL,MAAM,cACJ,OACA,WAAW,gBAAgB,MAAM,mBAAmB,mBAAmB,EAAE,UAAU,mBAAmB,MAAM,KAAK,KACjH,EAAE,QAAQ,SAAS,CACrB,CACF;AACF;AAEA,eAAe,cACb,OACA,MACA,OAAoB,CAAC,GACH;CAClB,IAAI,CAAC,sBAAsB,KAAK,MAAM,UAAU,GAC9C,MAAM,IAAI,MAAM,mCAAmC,MAAM,YAAY;CAEvE,MAAM,WAAW,OAAO,MAAM,SAAS,WAAW,MAAA,CAChD,GAAG,aAAa,SAAS,MAAM,aAAa,QAC5C;EACE,GAAG;EACH,SAAS;GACP,QAAQ;GACR,eAAe,UAAU,MAAM;GAC/B,gBAAgB;GAChB,wBAAwB;GACxB,GAAG,KAAK;EACV;CACF,CACF;CACA,MAAM,OAAgB,MAAM,SAAS,KAAK;CAC1C,IAAI,CAAC,SAAS,IAAI;EAChB,MAAM,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI;EAChE,MAAM,IAAI,MACR,8BAA8B,SAAS,OAAO,KAAK,QAAQ,UAAU,QAAQ,KAAK,UAAU,SAAS,YACvG;CACF;CACA,OAAO;AACT;AAEA,SAAS,mBAAmB,OAAqC;CAC/D,MAAM,UAAU,oBAAoB,MAAM,KAAK;CAC/C,OAAO;EACL,IAAI,QAAQ;EACZ,MAAM,QAAQ;EACd,KAAK,QAAQ;EACb,QAAQ,QAAQ,KAAK;EACrB,aAAa,QAAQ,kBAAkB;CACzC;AACF;AAEA,SAAS,YAAY,OAA0B;CAC7C,OAAO,aAAa,MAAM,KAAK,CAAC,CAAC,KAAK,EAAE,WAAW,IAAI;AACzD;AAEA,eAAe,0BACb,OACA,QACe;CACf,IAAI,MAAM,iBAAiB,OACzB;CAEF,MAAM,EAAE,eAAe,6BAA6B,MAClD,MAAM,cAAc,OAAO,kBAAkB,mBAAmB,MAAM,EAAE,YAAY,CACtF;CACA,IAAI,CAAC,iBAAiB,IAAI,UAAU,GAClC,MAAM,IAAI,+BAA+B,MAAM;AAEnD;AAEA,SAAS,gBAAgB,OAAe,MAAsB;CAC5D,IAAI,CAAC,OAAO,UAAU,KAAK,KAAK,QAAQ,GACtC,MAAM,IAAI,MAAM,GAAG,KAAK,4BAA4B;CAEtD,OAAO;AACT;;;;;;AAOA,SAAgB,sBAAsB,SAI1B;CACV,MAAM,EAAE,QAAQ,SAAS,cAAc;CACvC,IAAI,cAAc,QAAQ,CAAC,UAAU,WAAW,SAAS,GACvD,OAAO;CAET,MAAM,WAAW,WAAW,UAAU,MAAM,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK;CAC1E,MAAM,WAAW,UAAU,MAAM,CAAgB;CACjD,IAAI,SAAS,WAAW,SAAS,QAC/B,OAAO;CAET,OAAO,gBAAgB,OAAO,KAAK,UAAU,KAAK,GAAG,OAAO,KAAK,UAAU,KAAK,CAAC;AACnF;AAEA,MAAM,kBAAkB,EAAE,YAAY;CACpC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACrB,YAAY,EAAE,YAAY;EACxB,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;EAChC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CAC7B,CAAC;AACH,CAAC;;AAUD,SAAgB,iCAAiC,SAId;CACjC,IAAI,QAAQ,UAAU,QAAQ,OAAO;CACrC,MAAM,SAAS,gBAAgB,UAAU,QAAQ,OAAO;CACxD,IAAI,CAAC,OAAO,WAAW,OAAO,KAAK,QAAQ,cAAc,OAAO,KAAK,WAAW,kBAC9E,OAAO;CAET,OAAO;EACL,QAAQ;EACR,YAAY,QAAQ;EACpB,gBAAgB,OAAO,KAAK,WAAW,UAAU,YAAY;EAC7D,eAAe,OAAO,KAAK,WAAW;CACxC;AACF;AAEA,MAAM,mBAAmB,EAAE,YAAY;CACrC,QAAQ,EAAE,OAAO;CACjB,OAAO,EAAE,YAAY;EACnB,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;EAC9B,OAAO,EAAE,OAAO;EAChB,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,CAAC;CACD,YAAY,EAAE,YAAY,EACxB,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAC7B,CAAC;AACH,CAAC;AAOD,MAAM,4CAA4B,IAAI,IAAI;CACxC;CACA;CACA;CACA;CACA;AACF,CAAC;AAED,MAAM,yBAAyB,EAAE,YAAY;CAC3C,QAAQ,EAAE,OAAO;CACjB,YAAY,EAAE,YAAY;EACxB,gBAAgB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;EAChC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CAC7B,CAAC;CACD,cAAc,EAAE,YAAY;EAC1B,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;EAC1B,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;EACtB,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;EACvB,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;EACxC,iBAAiB,EACd,YAAY,EACX,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAC7B,CAAC,CAAC,CACD,SAAS;EACZ,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;EAC1B,UAAU,EAAE,IAAI;EAChB,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;EAChC,aAAa,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;CACrC,CAAC;AACH,CAAC;;;;;;AAuBD,SAAgB,2BAA2B,SAAiD;CAC1F,IAAI,QAAQ,UAAU,UACpB,OAAO;CAET,MAAM,SAAS,iBAAiB,UAAU,QAAQ,OAAO;CACzD,IAAI,CAAC,OAAO,WAAW,OAAO,KAAK,WAAW,UAC5C,OAAO;CAET,MAAM,OAAO,OAAO,KAAK,WAAW,UAAU,YAAY;CAC1D,MAAM,EAAE,QAAQ,OAAO,SAAS,OAAO,KAAK;CAC5C,OAAO;EACL,QAAQ;EACR,YAAY,QAAQ;EACpB,gBAAgB;EAChB,SAAS;GAAE,SAAS;GAAU,SAAS,GAAG,KAAK,GAAG;EAAS;EAC3D,OAAO;GAAE;GAAQ;GAAO;EAAK;EAC7B,SAAS,QAAQ;CACnB;AACF;AAEA,MAAM,0BAA0B,EAAE,YAAY;CAC5C,QAAQ,EAAE,OAAO;CACjB,cAAc,EAAE,YAAY;EAC1B,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;EAC9B,UAAU,EAAE,IAAI;EAChB,QAAQ,EAAE,QAAQ;EAClB,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CAC7E,CAAC;CACD,YAAY,EAAE,YAAY,EACxB,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAC7B,CAAC;CACD,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACpD,CAAC;;;;;;AAkBD,SAAgB,iCACd,SACgC;CAChC,IAAI,QAAQ,UAAU,gBACpB,OAAO;CAET,MAAM,SAAS,wBAAwB,UAAU,QAAQ,OAAO;CAChE,IAAI,CAAC,OAAO,WAAW,OAAO,KAAK,WAAW,UAC5C,OAAO;CAET,MAAM,KAAK,OAAO,KAAK;CACvB,MAAM,SAAS,OAAO,KAAK,OAAO;CAClC,OAAO;EACL,QAAQ;EACR,YAAY,QAAQ;EACpB,gBAAgB,OAAO,KAAK,WAAW,UAAU,YAAY;EAC7D,UAAU,GAAG;EACb,OAAO,GAAG;EACV,QAAQ,GAAG;EACX,WAAW,GAAG,SAAU,GAAG,WAAW,SAAS,SAAU;CAC3D;AACF;;AAGA,SAAgB,kCACd,SAC8B;CAC9B,IAAI,QAAQ,UAAU,gBACpB,OAAO;CAET,MAAM,SAAS,uBAAuB,UAAU,QAAQ,OAAO;CAC/D,IAAI,CAAC,OAAO,WAAW,OAAO,KAAK,WAAW,aAC5C,OAAO;CAGT,MAAM,MAAM,OAAO,KAAK;CACxB,MAAM,aAAa,IAAI;CACvB,IAAI,eAAe,QAAQ,CAAC,0BAA0B,IAAI,UAAU,GAClE,OAAO;CAET,MAAM,OAAO,OAAO,KAAK,WAAW,UAAU,YAAY;CAC1D,OAAO;EACL,QAAQ;EACR,YAAY,QAAQ;EACpB,yBAAyB,OAAO,KAAK,WAAW;EAChD,gBAAgB;EAChB,SAAS;GAAE,SAAS;GAAU,SAAS,GAAG,KAAK,gBAAgB,IAAI;EAAK;EACxE,aAAa;GACX,IAAI,IAAI;GACR,MAAM,IAAI;GACV,SAAS,IAAI;GACb,QAAQ,IAAI;GACZ,oBAAoB,IAAI,iBAAiB,UAAU,YAAY,KAAK;GACpE,SAAS,IAAI;GACb,KAAK,IAAI;GACT;GACA,SAAS,IAAI;EACf;EACA,SAAS,QAAQ;CACnB;AACF"}

package/dist/id-DwCihQr4.mjs

@@ -0,0 +1,31 @@
+import { z } from "zod";
+//#region src/schema/common.ts
+const SCHEMA_VERSION = 1;
+const schemaVersionSchema = z.literal(1).describe("Version of the entity schema this row was written with.");
+const isoDateTimeSchema = z.iso.datetime().describe("UTC timestamp in ISO 8601 format, e.g. 2026-08-26T12:00:00Z.");
+const usdSchema = z.number().finite().nonnegative().describe("Amount in US dollars.");
+/**
+* Open vocabulary value. Standard values ship as exported constants; custom
+* values matching the pattern are equally valid.
+*/
+const vocabularySchema = z.string().regex(/^[a-z][a-z0-9_]{0,63}$/, "must be lowercase snake_case starting with a letter").describe("Lowercase snake_case name, e.g. github_issue or sentry_alert.");
+const replyToSchema = z.strictObject({
+	channel: z.string().min(1).describe("Connector that should carry replies, e.g. github or slack."),
+	address: z.string().min(1).describe("Connector-specific reply address, e.g. acme/web#41 or a Slack thread id.")
+});
+//#endregion
+//#region src/schema/id.ts
+function idSchema(prefix) {
+	return z.string().regex(new RegExp(`^${prefix}_[a-z0-9]{6,64}$`));
+}
+const factoryIdSchema = idSchema("fac");
+const repositoryIdSchema = idSchema("repo");
+const signalIdSchema = idSchema("sig");
+const taskIdSchema = idSchema("task");
+const changeIdSchema = idSchema("chg");
+const receiptIdSchema = idSchema("rcpt");
+const repositoryIdsSchema = z.array(repositoryIdSchema).min(1);
+//#endregion
+export { repositoryIdsSchema as a, SCHEMA_VERSION as c, schemaVersionSchema as d, usdSchema as f, repositoryIdSchema as i, isoDateTimeSchema as l, factoryIdSchema as n, signalIdSchema as o, vocabularySchema as p, receiptIdSchema as r, taskIdSchema as s, changeIdSchema as t, replyToSchema as u };
+
+//# sourceMappingURL=id-DwCihQr4.mjs.map

package/dist/id-DwCihQr4.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"id-DwCihQr4.mjs","names":[],"sources":["../src/schema/common.ts","../src/schema/id.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport const SCHEMA_VERSION = 1;\n\nexport const schemaVersionSchema = z\n  .literal(SCHEMA_VERSION)\n  .describe(\"Version of the entity schema this row was written with.\");\n\nexport const isoDateTimeSchema = z.iso\n  .datetime()\n  .describe(\"UTC timestamp in ISO 8601 format, e.g. 2026-08-26T12:00:00Z.\");\n\nexport const usdSchema = z.number().finite().nonnegative().describe(\"Amount in US dollars.\");\n\n/**\n * Open vocabulary value. Standard values ship as exported constants; custom\n * values matching the pattern are equally valid.\n */\nexport const vocabularySchema = z\n  .string()\n  .regex(/^[a-z][a-z0-9_]{0,63}$/, \"must be lowercase snake_case starting with a letter\")\n  .describe(\"Lowercase snake_case name, e.g. github_issue or sentry_alert.\");\n\nexport const replyToSchema = z.strictObject({\n  channel: z\n    .string()\n    .min(1)\n    .describe(\"Connector that should carry replies, e.g. github or slack.\"),\n  address: z\n    .string()\n    .min(1)\n    .describe(\"Connector-specific reply address, e.g. acme/web#41 or a Slack thread id.\"),\n});\n\nexport type ReplyTo = z.infer<typeof replyToSchema>;\n","import { z } from \"zod\";\n\nfunction idSchema(prefix: string) {\n  return z.string().regex(new RegExp(`^${prefix}_[a-z0-9]{6,64}$`));\n}\n\nexport const factoryIdSchema = idSchema(\"fac\");\nexport const repositoryIdSchema = idSchema(\"repo\");\nexport const signalIdSchema = idSchema(\"sig\");\nexport const taskIdSchema = idSchema(\"task\");\nexport const changeIdSchema = idSchema(\"chg\");\nexport const receiptIdSchema = idSchema(\"rcpt\");\n\nexport const repositoryIdsSchema = z.array(repositoryIdSchema).min(1);\n\nexport type FactoryId = z.infer<typeof factoryIdSchema>;\nexport type RepositoryId = z.infer<typeof repositoryIdSchema>;\nexport type SignalId = z.infer<typeof signalIdSchema>;\nexport type TaskId = z.infer<typeof taskIdSchema>;\nexport type ChangeId = z.infer<typeof changeIdSchema>;\nexport type ReceiptId = z.infer<typeof receiptIdSchema>;\n"],"mappings":";;AAEA,MAAa,iBAAiB;AAE9B,MAAa,sBAAsB,EAChC,QAAA,CAAsB,CAAC,CACvB,SAAS,yDAAyD;AAErE,MAAa,oBAAoB,EAAE,IAChC,SAAS,CAAC,CACV,SAAS,8DAA8D;AAE1E,MAAa,YAAY,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,uBAAuB;;;;;AAM3F,MAAa,mBAAmB,EAC7B,OAAO,CAAC,CACR,MAAM,0BAA0B,qDAAqD,CAAC,CACtF,SAAS,+DAA+D;AAE3E,MAAa,gBAAgB,EAAE,aAAa;CAC1C,SAAS,EACN,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,4DAA4D;CACxE,SAAS,EACN,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,0EAA0E;AACxF,CAAC;;;AC9BD,SAAS,SAAS,QAAgB;CAChC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,IAAI,OAAO,IAAI,OAAO,iBAAiB,CAAC;AAClE;AAEA,MAAa,kBAAkB,SAAS,KAAK;AAC7C,MAAa,qBAAqB,SAAS,MAAM;AACjD,MAAa,iBAAiB,SAAS,KAAK;AAC5C,MAAa,eAAe,SAAS,MAAM;AAC3C,MAAa,iBAAiB,SAAS,KAAK;AAC5C,MAAa,kBAAkB,SAAS,MAAM;AAE9C,MAAa,sBAAsB,EAAE,MAAM,kBAAkB,CAAC,CAAC,IAAI,CAAC"}

package/dist/index-WNGZJRRH.d.mts

@@ -0,0 +1,67 @@
+import { c as ReplyTo, r as SignalSource } from "./signal-CHVEmzvI.mjs";
+import { z } from "zod";
+//#region src/connectors/index.d.ts
+interface WebhookEvent {
+  deliveryId: string;
+  event: string;
+  payload: unknown;
+}
+interface NormalizedSignal<TSource extends SignalSource = SignalSource> {
+  source: TSource;
+  deliveryId: string;
+  replyTo: ReplyTo;
+  payload: unknown;
+}
+type SignalNormalizer<TSignal extends NormalizedSignal = NormalizedSignal> = (event: WebhookEvent) => TSignal | null;
+declare const communicationOutcomes: readonly ["accepted", "started", "succeeded", "failed", "needs_human", "question", "digest", "rolled_back", "budget_warning", "budget_exhausted", "message"];
+declare const communicationOutcomeSchema: z.ZodEnum<{
+  message: "message";
+  succeeded: "succeeded";
+  failed: "failed";
+  needs_human: "needs_human";
+  question: "question";
+  accepted: "accepted";
+  rolled_back: "rolled_back";
+  started: "started";
+  digest: "digest";
+  budget_warning: "budget_warning";
+  budget_exhausted: "budget_exhausted";
+}>;
+declare const communicationEventSchema: z.ZodObject<{
+  eventId: z.ZodString;
+  repositoryId: z.ZodString;
+  taskId: z.ZodOptional<z.ZodString>;
+  changeId: z.ZodOptional<z.ZodString>;
+  replyTo: z.ZodObject<{
+    channel: z.ZodString;
+    address: z.ZodString;
+  }, z.core.$strict>;
+  outcome: z.ZodEnum<{
+    message: "message";
+    succeeded: "succeeded";
+    failed: "failed";
+    needs_human: "needs_human";
+    question: "question";
+    accepted: "accepted";
+    rolled_back: "rolled_back";
+    started: "started";
+    digest: "digest";
+    budget_warning: "budget_warning";
+    budget_exhausted: "budget_exhausted";
+  }>;
+  data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strict>;
+type CommunicationOutcome = z.infer<typeof communicationOutcomeSchema>;
+type CommunicationEvent = z.infer<typeof communicationEventSchema>;
+interface CommunicationAdapter {
+  readonly channel: string;
+  deliver(event: CommunicationEvent): Promise<void>;
+}
+interface CommunicationRouter {
+  readonly channels: readonly string[];
+  deliver(event: CommunicationEvent): Promise<void>;
+}
+declare function createCommunicationRouter(adapters: readonly CommunicationAdapter[]): CommunicationRouter;
+//#endregion
+export { NormalizedSignal as a, communicationEventSchema as c, createCommunicationRouter as d, CommunicationRouter as i, communicationOutcomeSchema as l, CommunicationEvent as n, SignalNormalizer as o, CommunicationOutcome as r, WebhookEvent as s, CommunicationAdapter as t, communicationOutcomes as u };
+//# sourceMappingURL=index-WNGZJRRH.d.mts.map