@zhin.js/adapter-github 1.1.18 → 1.1.19

package/lib/endpoint.js

@@ -1,112 +1,137 @@
-import { Endpoint } from 'zhin.js/adapter';
+import { createEndpointSpecification, endpointSpec } from 'zhin.js/adapter';
 import { formatCompact, getAdapterLogger } from '@zhin.js/logger';
 import { GhClient } from './gh-client.js';
 import { enrichInboundContent, formatInboundContent, formatOutboundBody, githubInboundConversation, parseChannelId, } from './protocol.js';
 import { registerGithubWebhookRoutes } from './webhook.js';
-import { GithubClient } from './client.js';
+import { WorkspaceManager } from './workspace-manager.js';
+import { lookupGithubOauthAccessToken } from './oauth-users.js';
 /**
  * GitHub 是代码协作面（issue/PR），无好友/群/频道等 IM 社交概念，
  * 不适用 EndpointManagement 语义端口；本 endpoint 不暴露该端口。
  */
-export class GithubEndpoint extends Endpoint {
+export class GithubEndpoint extends GhClient {
+    [endpointSpec] = createEndpointSpecification(this, {
+        start: signal => this.#startFramework(signal), open: () => this.#openFramework(), close: () => this.#closeFramework(),
+        stop: () => this.#stopFramework(), send: request => this.#sendFramework(request),
+    });
+    #workspaceManager;
+    get database() { return this.#options.database; }
+    get host() { return this.#options.config.host; }
+    async getUserOrDefaultApi(platform, platformUid) {
+        if (platform && platformUid) {
+            const token = await lookupGithubOauthAccessToken(this.database, platform, platformUid);
+            if (token)
+                return this.withToken(token);
+        }
+        return this;
+    }
+    get workspaceManager() { return this.#workspaceManager ??= new WorkspaceManager(this, this.config.workspaceRoot); }
     #logger;
     #options;
-    client;
     #routeReleases = [];
     #open = false;
     #started = false;
     constructor(options) {
-        super();
+        super({ host: options.config.host, appAuth: { appId: options.config.appId, privateKey: options.config.privateKey } });
         this.#logger = getAdapterLogger('github', options.config.id);
         this.#options = options;
-        const api = options.createClient?.(options.config) ?? defaultCreateClient(options.config);
-        this.client = new GithubClient(options.config.id, api, options.config, options.database);
     }
     get config() {
-        return this.client.config;
+        return this.#options.config;
     }
-    async start() {
+    async #startFramework(signal) {
+        this.bindExecutionSignal(signal);
+        signal.throwIfAborted();
         if (this.#started)
             return;
         this.#started = true;
         try {
-            const result = await this.client.api.verifyAuth();
+            const result = await this.verifyAuth();
+            signal.throwIfAborted();
             if (!result.ok)
                 throw new Error(`GitHub 认证失败: ${result.message}`);
-            if (this.client.config.webhookSecret) {
+            if (this.#options.config.webhookSecret) {
                 if (!this.#options.http) {
                     throw new TypeError('GitHub webhook_secret requires httpHostToken');
                 }
                 this.#routeReleases.push(...registerGithubWebhookRoutes(this.#options.http, this));
                 this.#logger.debug(formatCompact({
-                    endpoint: this.client.name,
+                    endpoint: this.#options.config.id,
                     op: 'webhook',
-                    path: this.client.config.webhookPath,
+                    path: this.#options.config.webhookPath,
                 }));
             }
             else {
                 this.#logger.debug(formatCompact({
-                    endpoint: this.client.name,
+                    endpoint: this.#options.config.id,
                     op: 'connect',
                     mode: 'api-only',
-                    bot: this.client.api.authenticatedUser,
+                    bot: this.authenticatedUser,
                 }));
             }
         }
         catch (error) {
-            await this.stop();
+            await this.#stopFramework();
             this.#logger.error('Failed to connect GitHub endpoint:', error);
             throw error;
         }
     }
-    open() {
+    #openFramework() {
         this.#open = true;
     }
-    close() {
+    #closeFramework() {
         this.#open = false;
     }
-    async stop() {
+    async #stopFramework() {
         this.#open = false;
         for (const release of this.#routeReleases.splice(0))
             release();
         this.#started = false;
         this.#logger.debug(formatCompact({ op: 'disconnect' }));
     }
-    async send({ conversation, payload }) {
+    async #sendFramework({ conversation, payload, signal }) {
         const parsed = parseChannelId(conversation.id);
         if (!parsed)
             throw new Error(`无效的 GitHub conversation ID: ${conversation.id}`);
         const text = formatOutboundBody(payload);
         const r = parsed.type === 'issue'
-            ? await this.client.api.createIssueComment(parsed.repo, parsed.number, text)
-            : await this.client.api.createPRComment(parsed.repo, parsed.number, text);
+            ? await this.createIssueComment({ repo: parsed.repo, number: parsed.number, body: text, signal })
+            : await this.createPRComment({ repo: parsed.repo, number: parsed.number, body: text, signal });
         if (!r.ok)
             throw new Error(`发送失败: ${JSON.stringify(r.data)}`);
         this.#logger.debug(formatCompact({
             op: 'github_send',
-            endpoint: this.client.name,
+            endpoint: this.#options.config.id,
             target: `${conversation.kind}:${conversation.id}`,
             messageId: r.data.id,
         }));
         return String(r.data.id);
     }
     /** Test / internal: admit a parsed comment when open. */
-    admit(comment) {
+    admit(comment, nativeEvent = comment) {
+        if (!this.#open)
+            return;
+        void this[endpointSpec].events.run(() => this.#admitComment(comment, nativeEvent)).catch(error => {
+            this.#logger.warn(formatCompact({ op: 'github_gateway_receive_failed', error: error instanceof Error ? error.message : String(error) }));
+        });
+    }
+    #admitComment(comment, nativeEvent = comment) {
         if (!this.#open)
             return;
-        const botUser = this.client.config.botLogin
-            || this.client.api.getBotLogin()
-            || this.client.api.authenticatedUser;
+        const botUser = this.#options.config.botLogin
+            || this.getBotLogin()
+            || this.authenticatedUser;
         if (botUser && comment.sender === botUser)
             return;
         const conversation = githubInboundConversation(String(this.#options.id), comment);
-        const content = enrichInboundContent(formatInboundContent(comment.content), this.client.config, botUser ?? undefined, comment.repo);
-        void this.emit('message.receive', {
+        const content = enrichInboundContent(formatInboundContent(comment.content), this.#options.config, botUser ?? undefined, comment.repo);
+        void this[endpointSpec].events.emit('message.receive', {
+            event: nativeEvent,
             conversation,
             message: { conversation, id: comment.id },
             content,
             sender: { id: comment.sender, name: comment.sender },
-            endpointId: this.client.name,
+            endpointId: this.#options.config.id,
             metadata: Object.freeze({
                 repo: comment.repo,
                 kind: comment.kind,
@@ -123,7 +148,7 @@ export class GithubEndpoint extends Endpoint {
     admitPlatform(name, event) {
         if (!this.#open)
             return;
-        void this.emitPlatform(name, event).catch((error) => {
+        void this[endpointSpec].events.run(() => this[endpointSpec].events.platform(name, event)).catch((error) => {
             this.#logger.warn(formatCompact({
                 op: 'github_platform_event_failed',
                 event: name,

package/lib/gh-client.d.ts

@@ -25,6 +25,7 @@ export interface GitHubCommitAuthor {
     date?: string;
 }
 export interface GhClientOptions {
+    readonly signal?: AbortSignal;
     /** GitHub Enterprise 主机名（默认 github.com） */
     host?: string;
     /** 覆盖 gh CLI 默认认证的 Personal Access Token / OAuth Token */
@@ -32,8 +33,27 @@ export interface GhClientOptions {
     /** GitHub App 认证 — 自动管理 Installation Token */
     appAuth?: AppAuth;
 }
+/** Per-request cancellation is independent of this account's execution lifetime. */
+export interface GhRequestLifetime {
+    readonly signal?: AbortSignal;
+}
+/** An API action and its transport inputs, retained together through authentication and subprocess IO. */
+export interface GhApiRequest extends GhRequestLifetime {
+    readonly method: string;
+    readonly path: string;
+    readonly body?: unknown;
+    readonly headers?: Readonly<Record<string, string>>;
+}
+/** One comment publication, shared by issue and PR conversation sends. */
+export interface GhCommentRequest extends GhRequestLifetime {
+    readonly repo: string;
+    readonly number: number;
+    readonly body: string;
+}
 export declare class GhClient {
-    private host?;
+    protected apiHost?: string;
+    protected executionSignal?: AbortSignal;
+    protected bindExecutionSignal(signal: AbortSignal): void;
     private token?;
     private _appAuth?;
     private _resolvedKey?;
@@ -47,6 +67,7 @@ export declare class GhClient {
     /** 上次 syncInstallations 时间 (ms) */
     private _lastSyncTime;
     constructor(options?: GhClientOptions);
+    protected fetchNative(input: string, init?: RequestInit): Promise<Response>;
     /** 创建使用指定 token 的副本（共享 host 配置，不继承 App 认证） */
     withToken(token: string): GhClient;
     get authenticatedUser(): string | null;
@@ -56,7 +77,7 @@ export declare class GhClient {
      * @param repo 仓库全名（owner/repo），用于选择正确的 Installation
      */
     private ensureTokenForRepo;
-    request<T = any>(method: string, path: string, body?: any, headers?: Record<string, string>): Promise<{
+    request<T = any>({ method, path, body, headers, signal }: GhApiRequest): Promise<{
         ok: boolean;
         status: number;
         data: T;
@@ -136,7 +157,7 @@ export declare class GhClient {
         status: number;
         data: any;
     }>;
-    createIssueComment(repo: string, issueNumber: number, body: string): Promise<{
+    createIssueComment({ repo, number, body, signal }: GhCommentRequest): Promise<{
         ok: boolean;
         status: number;
         data: {
@@ -150,7 +171,7 @@ export declare class GhClient {
         status: number;
         data: any;
     }>;
-    createPRComment(repo: string, prNumber: number, body: string): Promise<{
+    createPRComment(request: GhCommentRequest): Promise<{
         ok: boolean;
         status: number;
         data: {
@@ -243,9 +264,9 @@ export declare class GhClient {
     /** 生成 GitHub App JWT（有效期 10 分钟） */
     static createJWT(appId: string | number, privateKey: string): string;
     /** 使用 JWT 获取指定 Installation 的 Access Token（有效期 1 小时） */
-    refreshInstallationToken(installationId: number): Promise<void>;
+    refreshInstallationToken(installationId: number, { signal }?: GhRequestLifetime): Promise<void>;
     /** 发现所有 App 安装及其可访问的仓库 */
-    syncInstallations(): Promise<void>;
+    syncInstallations({ signal }?: GhRequestLifetime): Promise<void>;
     /** 当前是否使用 App 认证 */
     get isAppAuth(): boolean;
     /** 所有已发现的安装 */

package/lib/gh-client.js

@@ -9,10 +9,14 @@
  * 零外部依赖，使用 Node.js 原生模块。
  */
 import { spawn } from 'node:child_process';
+import { createEndpointOperation } from 'zhin.js/adapter';
+import { EndpointDeliveryError } from '@zhin.js/im-contract';
 import crypto from 'node:crypto';
 import fs from 'node:fs';
 export class GhClient {
-    host;
+    apiHost;
+    executionSignal;
+    bindExecutionSignal(signal) { this.executionSignal = signal; }
     token;
     _appAuth;
     _resolvedKey;
@@ -26,23 +30,30 @@ export class GhClient {
     /** 上次 syncInstallations 时间 (ms) */
     _lastSyncTime = 0;
     constructor(options = {}) {
-        this.host = options.host;
+        this.apiHost = options.host;
+        this.executionSignal = options.signal;
         this.token = options.token;
         this._appAuth = options.appAuth;
     }
+    fetchNative(input, init) {
+        this.executionSignal?.throwIfAborted();
+        init?.signal?.throwIfAborted();
+        return fetch(input, { ...init, ...(this.executionSignal ? { signal: init?.signal ? AbortSignal.any([this.executionSignal, init.signal]) : this.executionSignal } : {}) });
+    }
     /** 创建使用指定 token 的副本（共享 host 配置，不继承 App 认证） */
     withToken(token) {
-        return new GhClient({ host: this.host, token });
+        return new GhClient({ host: this.apiHost, token, signal: this.executionSignal });
     }
     get authenticatedUser() { return this._user; }
     // ── 底层执行 ──────────────────────────────────────────────────────
-    exec(args, stdin) {
-        const fullArgs = this.host ? [...args, '--hostname', this.host] : args;
-        const env = this.token
-            ? { ...process.env, GH_TOKEN: this.token }
+    exec({ args, stdin, token, signal = this.executionSignal }) {
+        signal?.throwIfAborted();
+        const fullArgs = this.apiHost ? [...args, '--hostname', this.apiHost] : args;
+        const env = token
+            ? { ...process.env, GH_TOKEN: token }
             : undefined;
         return new Promise((resolve, reject) => {
-            const proc = spawn('gh', fullArgs, { stdio: ['pipe', 'pipe', 'pipe'], env });
+            const proc = spawn('gh', fullArgs, { stdio: ['pipe', 'pipe', 'pipe'], env, signal });
             let stdout = '';
             let stderr = '';
             proc.stdout.on('data', (d) => (stdout += d.toString()));
@@ -73,9 +84,9 @@ export class GhClient {
      * 确保 App 认证的 Installation Token 有效（自动按 repo 查找对应安装）
      * @param repo 仓库全名（owner/repo），用于选择正确的 Installation
      */
-    async ensureTokenForRepo(repo) {
+    async ensureTokenForRepo(repo, signal) {
         if (!this._appAuth)
-            return;
+            return this.token;
         let installId;
         if (repo) {
             const key = repo.toLowerCase();
@@ -92,7 +103,7 @@ export class GhClient {
             }
             // 懒加载重新发现（5 分钟冷却）
             if (!installId && Date.now() - this._lastSyncTime > 5 * 60_000) {
-                await this.syncInstallations();
+                await this.syncInstallations({ signal });
                 installId = this._repoToInstallation.get(key);
                 if (!installId) {
                     const owner = key.split('/')[0];
@@ -110,18 +121,20 @@ export class GhClient {
             installId = this._allInstallations[0].id;
         }
         if (!installId)
-            return;
+            return this.token;
         const cached = this._installationTokens.get(installId);
         if (cached && cached.expiresAt > Date.now() + 60_000) {
-            this.token = cached.token;
-            return;
+            return cached.token;
         }
-        await this.refreshInstallationToken(installId);
+        await this.refreshInstallationToken(installId, { signal });
+        return this._installationTokens.get(installId)?.token;
     }
-    async request(method, path, body, headers) {
+    async request({ method, path, body, headers, signal }) {
+        const operationSignal = this.executionSignal && signal ? AbortSignal.any([this.executionSignal, signal]) : this.executionSignal ?? signal;
+        const operation = createEndpointOperation({ signal: operationSignal });
         // 从路径自动检测 repo 以选择正确的 Installation Token
         const repoMatch = path.match(/^\/repos\/([^/?]+\/[^/?]+)/);
-        await this.ensureTokenForRepo(repoMatch?.[1]);
+        const token = await operation.prepare(() => this.ensureTokenForRepo(repoMatch?.[1], operationSignal));
         const args = ['api', path, '--method', method];
         if (body)
             args.push('--input', '-');
@@ -131,7 +144,8 @@ export class GhClient {
             }
         }
         try {
-            const raw = await this.exec(args, body ? JSON.stringify(body) : undefined);
+            const execute = () => this.exec({ args, stdin: body ? JSON.stringify(body) : undefined, token, signal: operationSignal });
+            const raw = await operation.run(execute);
             let data;
             try {
                 data = raw ? JSON.parse(raw) : null;
@@ -142,6 +156,8 @@ export class GhClient {
             return { ok: true, status: 200, data };
         }
         catch (err) {
+            if (err instanceof EndpointDeliveryError)
+                throw err;
             let data;
             const errObj = err instanceof Error ? err : new Error(String(err));
             try {
@@ -153,11 +169,11 @@ export class GhClient {
             return { ok: false, status: err.exitCode || 0, data };
         }
     }
-    get(path) { return this.request('GET', path); }
-    post(path, body) { return this.request('POST', path, body); }
-    patch(path, body) { return this.request('PATCH', path, body); }
-    put(path, body) { return this.request('PUT', path, body); }
-    del(path, body) { return this.request('DELETE', path, body); }
+    get(path) { return this.request({ method: 'GET', path }); }
+    post(path, body) { return this.request({ method: 'POST', path, body }); }
+    patch(path, body) { return this.request({ method: 'PATCH', path, body }); }
+    put(path, body) { return this.request({ method: 'PUT', path, body }); }
+    del(path, body) { return this.request({ method: 'DELETE', path, body }); }
     // ── 认证验证 ──────────────────────────────────────────────────────
     async verifyAuth() {
         // App 认证模式：自动发现所有安装
@@ -170,8 +186,8 @@ export class GhClient {
                 // 用 JWT 查询 App 信息（/app 端点只接受 JWT 认证，不能用 Installation Token）
                 const key = this.resolvePrivateKey();
                 const jwt = GhClient.createJWT(this._appAuth.appId, key);
-                const baseUrl = this.host ? `https://${this.host}/api/v3` : 'https://api.github.com';
-                const appRes = await fetch(`${baseUrl}/app`, {
+                const baseUrl = this.apiHost ? `https://${this.apiHost}/api/v3` : 'https://api.github.com';
+                const appRes = await this.fetchNative(`${baseUrl}/app`, {
                     headers: { Authorization: `Bearer ${jwt}`, Accept: 'application/vnd.github+json' },
                 });
                 if (appRes.ok) {
@@ -203,8 +219,8 @@ export class GhClient {
                 }
                 return { ok: false, user: '', message: 'Token 无效' };
             }
-            await this.exec(['auth', 'status']);
-            const raw = await this.exec(['api', '/user', '--jq', '.login']);
+            await this.exec({ args: ['auth', 'status'], token: this.token });
+            const raw = await this.exec({ args: ['api', '/user', '--jq', '.login'], token: this.token });
             const login = raw.trim();
             this._user = login;
             return { ok: true, user: login, message: `gh CLI: ${login}` };
@@ -254,14 +270,16 @@ export class GhClient {
     async closePR(repo, number) {
         return this.patch(`/repos/${repo}/pulls/${number}`, { state: 'closed' });
     }
-    async createIssueComment(repo, issueNumber, body) {
-        return this.post(`/repos/${repo}/issues/${issueNumber}/comments`, { body });
+    async createIssueComment({ repo, number, body, signal }) {
+        return this.request({
+            method: 'POST', path: `/repos/${repo}/issues/${number}/comments`, body: { body }, signal,
+        });
     }
     async deleteIssueComment(repo, commentId) {
         return this.del(`/repos/${repo}/issues/comments/${commentId}`);
     }
-    async createPRComment(repo, prNumber, body) {
-        return this.createIssueComment(repo, prNumber, body);
+    async createPRComment(request) {
+        return this.createIssueComment(request);
     }
     async deletePRReviewComment(repo, commentId) {
         return this.del(`/repos/${repo}/pulls/comments/${commentId}`);
@@ -327,7 +345,7 @@ export class GhClient {
         return this.getBotIdentitySync();
     }
     buildCloneUrl(repo, token) {
-        const host = this.host || 'github.com';
+        const host = this.apiHost || 'github.com';
         return `https://x-access-token:${encodeURIComponent(token)}@${host}/${repo}.git`;
     }
     async resolveBotUserId() {
@@ -337,9 +355,9 @@ export class GhClient {
         if (!slug)
             return null;
         const login = `${slug}[bot]`;
-        const baseUrl = this.host ? `https://${this.host}/api/v3` : 'https://api.github.com';
+        const baseUrl = this.apiHost ? `https://${this.apiHost}/api/v3` : 'https://api.github.com';
         try {
-            const res = await fetch(`${baseUrl}/users/${encodeURIComponent(login)}`, {
+            const res = await this.fetchNative(`${baseUrl}/users/${encodeURIComponent(login)}`, {
                 headers: { Accept: 'application/vnd.github+json' },
             });
             if (!res.ok)
@@ -363,7 +381,7 @@ export class GhClient {
         return this.del(`/user/starred/${repo}`);
     }
     async isStarred(repo) {
-        const r = await this.request('GET', `/user/starred/${repo}`);
+        const r = await this.request({ method: 'GET', path: `/user/starred/${repo}` });
         return r.ok;
     }
     // ── Fork ─────────────────────────────────────────────────────────
@@ -400,16 +418,17 @@ export class GhClient {
         return `${header}.${payload}.${signature}`;
     }
     /** 使用 JWT 获取指定 Installation 的 Access Token（有效期 1 小时） */
-    async refreshInstallationToken(installationId) {
+    async refreshInstallationToken(installationId, { signal } = {}) {
+        signal?.throwIfAborted();
         if (!this._appAuth)
             throw new Error('未配置 App 认证');
         const key = this.resolvePrivateKey();
         const jwt = GhClient.createJWT(this._appAuth.appId, key);
-        const baseUrl = this.host
-            ? `https://${this.host}/api/v3`
+        const baseUrl = this.apiHost
+            ? `https://${this.apiHost}/api/v3`
             : 'https://api.github.com';
-        const res = await fetch(`${baseUrl}/app/installations/${installationId}/access_tokens`, {
-            method: 'POST',
+        const res = await this.fetchNative(`${baseUrl}/app/installations/${installationId}/access_tokens`, {
+            method: 'POST', signal,
             headers: {
                 Authorization: `Bearer ${jwt}`,
                 Accept: 'application/vnd.github+json',
@@ -420,6 +439,7 @@ export class GhClient {
             throw new Error(`Installation Token 获取失败 (${res.status}): ${body}`);
         }
         const data = (await res.json());
+        signal?.throwIfAborted();
         this.token = data.token;
         this._installationTokens.set(installationId, {
             token: data.token,
@@ -427,39 +447,44 @@ export class GhClient {
         });
     }
     /** 发现所有 App 安装及其可访问的仓库 */
-    async syncInstallations() {
+    async syncInstallations({ signal } = {}) {
+        signal?.throwIfAborted();
         if (!this._appAuth)
             return;
         const key = this.resolvePrivateKey();
         const jwt = GhClient.createJWT(this._appAuth.appId, key);
-        const baseUrl = this.host ? `https://${this.host}/api/v3` : 'https://api.github.com';
-        const listRes = await fetch(`${baseUrl}/app/installations`, {
-            headers: { Authorization: `Bearer ${jwt}`, Accept: 'application/vnd.github+json' },
+        const baseUrl = this.apiHost ? `https://${this.apiHost}/api/v3` : 'https://api.github.com';
+        const listRes = await this.fetchNative(`${baseUrl}/app/installations`, {
+            headers: { Authorization: `Bearer ${jwt}`, Accept: 'application/vnd.github+json' }, signal,
         });
         if (!listRes.ok) {
             const errBody = await listRes.text();
             throw new Error(`列出安装失败: ${listRes.status} - ${errBody}`);
         }
         const installations = (await listRes.json());
+        signal?.throwIfAborted();
         this._allInstallations = installations;
         this._repoToInstallation.clear();
         for (const inst of installations) {
             try {
-                await this.refreshInstallationToken(inst.id);
+                await this.refreshInstallationToken(inst.id, { signal });
                 const cached = this._installationTokens.get(inst.id);
                 if (!cached)
                     continue;
-                const repoRes = await fetch(`${baseUrl}/installation/repositories?per_page=100`, {
-                    headers: { Authorization: `Bearer ${cached.token}`, Accept: 'application/vnd.github+json' },
+                const repoRes = await this.fetchNative(`${baseUrl}/installation/repositories?per_page=100`, {
+                    headers: { Authorization: `Bearer ${cached.token}`, Accept: 'application/vnd.github+json' }, signal,
                 });
                 if (repoRes.ok) {
                     const data = (await repoRes.json());
+                    signal?.throwIfAborted();
                     for (const repo of data.repositories) {
                         this._repoToInstallation.set(repo.full_name.toLowerCase(), inst.id);
                     }
                 }
             }
             catch {
+                signal?.throwIfAborted();
+                this.executionSignal?.throwIfAborted();
                 // 单个安装失败不影响其他
             }
         }
@@ -490,12 +515,12 @@ export class GhClient {
      * @returns events 数组 + 新 etag；若 304 未修改则 events 为空
      */
     async listRepoEvents(repo, etag) {
-        await this.ensureTokenForRepo(repo);
+        const token = await this.ensureTokenForRepo(repo);
         const args = ['api', `/repos/${repo}/events?per_page=30`, '--method', 'GET', '--include'];
         if (etag)
             args.push('-H', `If-None-Match: ${etag}`);
         try {
-            const raw = await this.exec(args);
+            const raw = await this.exec({ args, token });
             // --include 输出包含 HTTP 头 + 空行 + body
             const sepIdx = raw.indexOf('\r\n\r\n');
             const headerPart = sepIdx >= 0 ? raw.slice(0, sepIdx) : '';

package/lib/index.d.ts

@@ -1,9 +1,10 @@
 export { buildChannelId, enrichInboundContent, formatInboundContent, formatNotification, formatOutboundBody, normalizeWebhookPath, parseChannelId, parseIssueCommentInbound, parsePrReviewCommentInbound, parsePrReviewInbound, resolveGithubConfig, shouldAutoReplyRepo, verifyWebhookSignature, type GithubEndpointConfig, type GithubInboundComment, type GithubWireSegment, type ResolvedGithubConfig, } from './protocol.js';
 export * from './types.js';
 export { GhClient } from './gh-client.js';
-export { GithubClient, githubClient, type GithubClientEventMap } from './client.js';
+export type { GithubClientEventMap } from './client.js';
 export { WorkspaceManager } from './workspace-manager.js';
 export { parseMessageChannel, issueBranchName, resolveWorkspaceBranch, formatChannelContext, } from './github-channel-context.js';
 export { GithubEndpoint, defaultCreateClient, type GithubEndpointOptions, } from './endpoint.js';
 export { GITHUB_OAUTH_USERS_TABLE, GITHUB_OAUTH_USERS_SCHEMA, defineGithubOauthUsersTable, lookupGithubOauthAccessToken, } from './oauth-users.js';
 export { registerGithubWebhookRoutes, handleGithubWebhookRequest, dispatchGithubWebhookPayload, type GithubWebhookHandler, } from './webhook.js';
+export { GithubAdapter } from './adapter.js';

package/lib/index.js

@@ -1,9 +1,9 @@
 export { buildChannelId, enrichInboundContent, formatInboundContent, formatNotification, formatOutboundBody, normalizeWebhookPath, parseChannelId, parseIssueCommentInbound, parsePrReviewCommentInbound, parsePrReviewInbound, resolveGithubConfig, shouldAutoReplyRepo, verifyWebhookSignature, } from './protocol.js';
 export * from './types.js';
 export { GhClient } from './gh-client.js';
-export { GithubClient, githubClient } from './client.js';
 export { WorkspaceManager } from './workspace-manager.js';
 export { parseMessageChannel, issueBranchName, resolveWorkspaceBranch, formatChannelContext, } from './github-channel-context.js';
 export { GithubEndpoint, defaultCreateClient, } from './endpoint.js';
 export { GITHUB_OAUTH_USERS_TABLE, GITHUB_OAUTH_USERS_SCHEMA, defineGithubOauthUsersTable, lookupGithubOauthAccessToken, } from './oauth-users.js';
 export { registerGithubWebhookRoutes, handleGithubWebhookRequest, dispatchGithubWebhookPayload, } from './webhook.js';
+export { GithubAdapter } from './adapter.js';

package/lib/webhook.d.ts

@@ -7,7 +7,7 @@ import { type GithubInboundComment, type ResolvedGithubConfig } from './protocol
 export interface GithubWebhookHandler {
     readonly config: ResolvedGithubConfig;
     admitPlatform(name: string, event: unknown): void;
-    admit(comment: GithubInboundComment): void;
+    admit(comment: GithubInboundComment, nativeEvent?: unknown): void;
 }
 export declare function registerGithubWebhookRoutes(http: HttpHost, handler: GithubWebhookHandler): HttpRouteRegistration[];
 export declare function handleGithubWebhookRequest(request: IncomingMessage, response: ServerResponse, handler: GithubWebhookHandler): Promise<void>;

package/lib/webhook.js

@@ -70,19 +70,19 @@ export async function dispatchGithubWebhookPayload(event, payload, handler) {
     if (event === 'issue_comment') {
         const inbound = parseIssueCommentInbound(payload);
         if (inbound)
-            handler.admit(inbound);
+            handler.admit(inbound, payload);
         return;
     }
     if (event === 'pull_request_review_comment') {
         const inbound = parsePrReviewCommentInbound(payload);
         if (inbound)
-            handler.admit(inbound);
+            handler.admit(inbound, payload);
         return;
     }
     if (event === 'pull_request_review') {
         const inbound = parsePrReviewInbound(payload);
         if (inbound)
-            handler.admit(inbound);
+            handler.admit(inbound, payload);
     }
     // Cross-adapter subscription fan-out deferred (needs multi-adapter send in Runtime).
 }