harper-kb 0.2.0

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;;;;;;;;;GAUG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAExD;;;GAGG;AACH,MAAM,WAAW,SAAS;IACzB,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAM1D;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC7B,mDAAmD;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,IAAI,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IACnC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,CAAC,EAAE,kBAAkB,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,WAAW,CAAC,EAAE,IAAI,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC5B,4CAA4C;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,IAAI,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,UAAU,CAAC,EAAE,IAAI,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,4CAA4C;IAC5C,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,IAAI,CAAC;CACjB;AAMD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,0DAA0D;IAC1D,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,YAAa,SAAQ,cAAc;IACnD,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;CAClB;AAMD,sCAAsC;AACtC,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE/D,2CAA2C;AAC3C,MAAM,WAAW,oBAAoB;IACpC,0CAA0C;IAC1C,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,mCAAmC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC/B,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,IAAI,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACrC,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD;;GAEG;AACH,MAAM,WAAW,MAAM;IACtB,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IACrD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IACtD,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;IACrD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;CACtD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAChC,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,SAAS;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,KAAK;IACrB,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACzD,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACxE;AAED;;GAEG;AACH,MAAM,WAAW,KAAK;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE;QACV,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;KAC3C,CAAC;IACF,MAAM,EAAE;QACP,IAAI,CAAC,EAAE,CACN,OAAO,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,EACrG,OAAO,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;SAAE,KAC5B,IAAI,CAAC;KACV,CAAC;IACF,OAAO,EAAE;QACR,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAC7B,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;KAC/D,CAAC;IACF,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;CAC/D;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,OAAO,CAAC,MAAM,CAAC;IACd,MAAM,SAAS,EAAE;QAChB,EAAE,EAAE;YACH,aAAa,EAAE,KAAK,CAAC;YACrB,cAAc,EAAE,KAAK,CAAC;YACtB,UAAU,EAAE,KAAK,CAAC;YAClB,YAAY,EAAE,KAAK,CAAC;YACpB,QAAQ,EAAE,KAAK,CAAC;YAChB,UAAU,EAAE,KAAK,CAAC;YAClB,WAAW,EAAE,KAAK,CAAC;YACnB,SAAS,EAAE,KAAK,CAAC;YACjB,iBAAiB,EAAE,KAAK,CAAC;YACzB,eAAe,EAAE,KAAK,CAAC;YACvB,eAAe,EAAE,KAAK,CAAC;YACvB,eAAe,EAAE,KAAK,CAAC;YACvB,kBAAkB,EAAE,KAAK,CAAC;SAC1B,CAAC;KACF,CAAC;IACF,MAAM,MAAM,EAAE,MAAM,CAAC;CACrB"}

package/dist/types.js

@@ -0,0 +1,8 @@
+/**
+ * harper-kb — Type Definitions
+ *
+ * TypeScript interfaces for all table records, search parameters,
+ * and Harper global type declarations.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/webhooks/github.d.ts

@@ -0,0 +1,25 @@
+/**
+ * GitHub Webhook Handler
+ *
+ * Validates GitHub webhook signatures (HMAC-SHA256) and parses payloads
+ * for issues, issue comments, discussions, and discussion comments.
+ */
+import type { WebhookResult } from './types.ts';
+/**
+ * Validate a GitHub webhook signature using HMAC-SHA256.
+ *
+ * @param rawBody - The raw request body string
+ * @param signature - The X-Hub-Signature-256 header value
+ * @param secret - The configured webhook secret
+ * @returns true if the signature is valid
+ */
+export declare function validateSignature(rawBody: string, signature: string, secret: string): boolean;
+/**
+ * Parse a GitHub webhook payload and extract a triage-ready result.
+ *
+ * @param event - The X-GitHub-Event header value
+ * @param payload - The parsed JSON payload
+ * @returns A WebhookResult for triage, or null if the event should be ignored
+ */
+export declare function parsePayload(event: string, payload: Record<string, any>): WebhookResult | null;
+//# sourceMappingURL=github.d.ts.map

package/dist/webhooks/github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/webhooks/github.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAKhD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAQ7F;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,aAAa,GAAG,IAAI,CAa9F"}

package/dist/webhooks/github.js

@@ -0,0 +1,165 @@
+/**
+ * GitHub Webhook Handler
+ *
+ * Validates GitHub webhook signatures (HMAC-SHA256) and parses payloads
+ * for issues, issue comments, discussions, and discussion comments.
+ */
+import crypto from 'node:crypto';
+/** Maximum body length included in the summary */
+const MAX_BODY_LENGTH = 500;
+/**
+ * Validate a GitHub webhook signature using HMAC-SHA256.
+ *
+ * @param rawBody - The raw request body string
+ * @param signature - The X-Hub-Signature-256 header value
+ * @param secret - The configured webhook secret
+ * @returns true if the signature is valid
+ */
+export function validateSignature(rawBody, signature, secret) {
+    if (!signature || !secret)
+        return false;
+    const expected = 'sha256=' + crypto.createHmac('sha256', secret).update(rawBody).digest('hex');
+    // Constant-time comparison to prevent timing attacks
+    if (expected.length !== signature.length)
+        return false;
+    return crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(signature));
+}
+/**
+ * Parse a GitHub webhook payload and extract a triage-ready result.
+ *
+ * @param event - The X-GitHub-Event header value
+ * @param payload - The parsed JSON payload
+ * @returns A WebhookResult for triage, or null if the event should be ignored
+ */
+export function parsePayload(event, payload) {
+    switch (event) {
+        case 'issues':
+            return parseIssueEvent(payload);
+        case 'issue_comment':
+            return parseIssueCommentEvent(payload);
+        case 'discussion':
+            return parseDiscussionEvent(payload);
+        case 'discussion_comment':
+            return parseDiscussionCommentEvent(payload);
+        default:
+            return null;
+    }
+}
+function parseIssueEvent(payload) {
+    const action = payload.action;
+    const issue = payload.issue;
+    const repo = payload.repository?.full_name;
+    if (!issue || !repo)
+        return null;
+    // Only handle opened, closed, reopened
+    const directActions = ['opened', 'closed', 'reopened'];
+    if (directActions.includes(action)) {
+        return {
+            source: 'github-webhook',
+            sourceId: `github:issues:${action}:${repo}#${issue.number}`,
+            summary: formatIssueSummary(repo, issue, action),
+            rawPayload: payload,
+        };
+    }
+    // Handle labeled — only if the label is "kb-candidate"
+    if (action === 'labeled') {
+        const label = payload.label;
+        if (label?.name === 'kb-candidate') {
+            return {
+                source: 'github-webhook',
+                sourceId: `github:issues:labeled:${repo}#${issue.number}`,
+                summary: formatIssueSummary(repo, issue, 'labeled'),
+                rawPayload: payload,
+            };
+        }
+        return null;
+    }
+    return null;
+}
+function parseIssueCommentEvent(payload) {
+    const action = payload.action;
+    if (action !== 'created')
+        return null;
+    const comment = payload.comment;
+    const issue = payload.issue;
+    const repo = payload.repository?.full_name;
+    if (!comment || !issue || !repo)
+        return null;
+    const body = truncate(comment.body || '');
+    const summary = [
+        `[GitHub Comment] ${repo}#${issue.number}: "${issue.title}" (comment by ${comment.user?.login || 'unknown'})`,
+        '---',
+        body,
+    ].join('\n');
+    return {
+        source: 'github-webhook',
+        sourceId: `github:issue_comment:${comment.id}`,
+        summary,
+        rawPayload: payload,
+    };
+}
+function parseDiscussionEvent(payload) {
+    const action = payload.action;
+    if (action !== 'created' && action !== 'answered')
+        return null;
+    const discussion = payload.discussion;
+    const repo = payload.repository?.full_name;
+    if (!discussion || !repo)
+        return null;
+    const body = truncate(discussion.body || '');
+    const category = discussion.category?.name;
+    const summary = [
+        `[GitHub Discussion] ${repo}#${discussion.number}: "${discussion.title}" (${action} by ${discussion.user?.login || 'unknown'})`,
+        category ? `Category: ${category}` : '',
+        '---',
+        body,
+    ]
+        .filter(Boolean)
+        .join('\n');
+    return {
+        source: 'github-webhook',
+        sourceId: `github:discussion:${action}:${repo}#${discussion.number}`,
+        summary,
+        rawPayload: payload,
+    };
+}
+function parseDiscussionCommentEvent(payload) {
+    const action = payload.action;
+    if (action !== 'created')
+        return null;
+    const comment = payload.comment;
+    const discussion = payload.discussion;
+    const repo = payload.repository?.full_name;
+    if (!comment || !discussion || !repo)
+        return null;
+    const body = truncate(comment.body || '');
+    const summary = [
+        `[GitHub Discussion Comment] ${repo}#${discussion.number}: "${discussion.title}" (comment by ${comment.user?.login || 'unknown'})`,
+        '---',
+        body,
+    ].join('\n');
+    return {
+        source: 'github-webhook',
+        sourceId: `github:discussion_comment:${comment.id}`,
+        summary,
+        rawPayload: payload,
+    };
+}
+function formatIssueSummary(repo, issue, action) {
+    const labels = (issue.labels || []).map((l) => l.name).join(', ');
+    const body = truncate(issue.body || '');
+    const parts = [
+        `[GitHub Issue] ${repo}#${issue.number}: "${issue.title}" (${action} by ${issue.user?.login || 'unknown'})`,
+    ];
+    if (labels)
+        parts.push(`Labels: ${labels}`);
+    parts.push('---');
+    parts.push(body);
+    return parts.join('\n');
+}
+function truncate(text) {
+    if (text.length <= MAX_BODY_LENGTH)
+        return text;
+    return text.slice(0, MAX_BODY_LENGTH) + '...';
+}
+//# sourceMappingURL=github.js.map

package/dist/webhooks/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/webhooks/github.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC,kDAAkD;AAClD,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAc;IACnF,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAExC,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE/F,qDAAqD;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,OAA4B;IACvE,QAAQ,KAAK,EAAE,CAAC;QACf,KAAK,QAAQ;YACZ,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;QACjC,KAAK,eAAe;YACnB,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACxC,KAAK,YAAY;YAChB,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACtC,KAAK,oBAAoB;YACxB,OAAO,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC7C;YACC,OAAO,IAAI,CAAC;IACd,CAAC;AACF,CAAC;AAED,SAAS,eAAe,CAAC,OAA4B;IACpD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC;IAE3C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEjC,uCAAuC;IACvC,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IACvD,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO;YACN,MAAM,EAAE,gBAAgB;YACxB,QAAQ,EAAE,iBAAiB,MAAM,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE;YAC3D,OAAO,EAAE,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC;YAChD,UAAU,EAAE,OAAO;SACnB,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,KAAK,EAAE,IAAI,KAAK,cAAc,EAAE,CAAC;YACpC,OAAO;gBACN,MAAM,EAAE,gBAAgB;gBACxB,QAAQ,EAAE,yBAAyB,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE;gBACzD,OAAO,EAAE,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC;gBACnD,UAAU,EAAE,OAAO;aACnB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA4B;IAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC;IAE3C,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAE7C,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG;QACf,oBAAoB,IAAI,IAAI,KAAK,CAAC,MAAM,MAAM,KAAK,CAAC,KAAK,iBAAiB,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,SAAS,GAAG;QAC7G,KAAK;QACL,IAAI;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO;QACN,MAAM,EAAE,gBAAgB;QACxB,QAAQ,EAAE,wBAAwB,OAAO,CAAC,EAAE,EAAE;QAC9C,OAAO;QACP,UAAU,EAAE,OAAO;KACnB,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA4B;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAE/D,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC;IAE3C,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG;QACf,uBAAuB,IAAI,IAAI,UAAU,CAAC,MAAM,MAAM,UAAU,CAAC,KAAK,MAAM,MAAM,OAAO,UAAU,CAAC,IAAI,EAAE,KAAK,IAAI,SAAS,GAAG;QAC/H,QAAQ,CAAC,CAAC,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE;QACvC,KAAK;QACL,IAAI;KACJ;SACC,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO;QACN,MAAM,EAAE,gBAAgB;QACxB,QAAQ,EAAE,qBAAqB,MAAM,IAAI,IAAI,IAAI,UAAU,CAAC,MAAM,EAAE;QACpE,OAAO;QACP,UAAU,EAAE,OAAO;KACnB,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,OAA4B;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC;IAE3C,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAElD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG;QACf,+BAA+B,IAAI,IAAI,UAAU,CAAC,MAAM,MAAM,UAAU,CAAC,KAAK,iBAAiB,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,SAAS,GAAG;QAClI,KAAK;QACL,IAAI;KACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO;QACN,MAAM,EAAE,gBAAgB;QACxB,QAAQ,EAAE,6BAA6B,OAAO,CAAC,EAAE,EAAE;QACnD,OAAO;QACP,UAAU,EAAE,OAAO;KACnB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAA0B,EAAE,MAAc;IACnF,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAExC,MAAM,KAAK,GAAG;QACb,kBAAkB,IAAI,IAAI,KAAK,CAAC,MAAM,MAAM,KAAK,CAAC,KAAK,MAAM,MAAM,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,IAAI,SAAS,GAAG;KAC3G,CAAC;IACF,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEjB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC7B,IAAI,IAAI,CAAC,MAAM,IAAI,eAAe;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,KAAK,CAAC;AAC/C,CAAC"}

package/dist/webhooks/middleware.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Webhook Middleware
+ *
+ * HTTP middleware for Harper's scope.server.http() that routes
+ * /webhooks/<kbId>/<provider>/<secret> requests to the appropriate
+ * webhook handler after validating the per-KB secret.
+ */
+import type { Scope, HarperRequest } from '../types.ts';
+/**
+ * Create a webhook middleware function for Harper's scope.server.http().
+ *
+ * URL format: /webhooks/<kbId>/<provider>/<secret>
+ *
+ * The secret is validated against the WebhookEndpoint table for the
+ * given KB and provider. The same secret is used to verify the GitHub
+ * HMAC payload signature.
+ */
+export declare function createWebhookMiddleware(scope: Scope): (request: HarperRequest, next: (req: HarperRequest) => Promise<unknown>) => Promise<unknown>;
+//# sourceMappingURL=middleware.d.ts.map

package/dist/webhooks/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/webhooks/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAcxD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACtC,KAAK,EAAE,KAAK,GACV,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAyC9F"}

package/dist/webhooks/middleware.js

@@ -0,0 +1,144 @@
+/**
+ * Webhook Middleware
+ *
+ * HTTP middleware for Harper's scope.server.http() that routes
+ * /webhooks/<kbId>/<provider>/<secret> requests to the appropriate
+ * webhook handler after validating the per-KB secret.
+ */
+import { readBody } from "../http-utils.js";
+import { submitTriage, findBySourceId } from "../core/triage.js";
+import { validateWebhookSecret } from "../core/webhook-endpoints.js";
+import { validateSignature as validateGitHubSignature, parsePayload as parseGitHubPayload } from "./github.js";
+/**
+ * Check if a delivery ID has already been processed, using a TTL table
+ * so dedup is consistent across all workers.
+ */
+async function isDuplicateDelivery(deliveryId, kbId, provider) {
+    const existing = await databases.kb.WebhookDelivery.get(deliveryId);
+    if (existing)
+        return true;
+    await databases.kb.WebhookDelivery.put({ id: deliveryId, kbId, provider });
+    return false;
+}
+/**
+ * Create a webhook middleware function for Harper's scope.server.http().
+ *
+ * URL format: /webhooks/<kbId>/<provider>/<secret>
+ *
+ * The secret is validated against the WebhookEndpoint table for the
+ * given KB and provider. The same secret is used to verify the GitHub
+ * HMAC payload signature.
+ */
+export function createWebhookMiddleware(scope) {
+    const scopeLogger = scope.logger;
+    return async (request, next) => {
+        const pathname = request.pathname || '';
+        // Only handle /webhooks/* routes
+        if (!pathname.startsWith('/webhooks/')) {
+            return next(request);
+        }
+        // Only accept POST
+        if (request.method !== 'POST') {
+            return jsonResponse(405, { error: 'Method not allowed' });
+        }
+        // Extract kbId, provider, and secret from path:
+        // /webhooks/<kbId>/<provider>/<secret>
+        const parts = pathname.replace(/^\/webhooks\//, '').split('/');
+        if (parts.length < 3 || !parts[0] || !parts[1] || !parts[2]) {
+            return jsonResponse(400, {
+                error: 'Invalid webhook path. Use /webhooks/<kbId>/<provider>/<secret>',
+            });
+        }
+        const kbId = parts[0];
+        const provider = parts[1];
+        const secret = parts[2];
+        // Validate the secret against the WebhookEndpoint table
+        const endpoint = await validateWebhookSecret(secret, kbId, provider);
+        if (!endpoint) {
+            return jsonResponse(404, { error: 'Unknown webhook endpoint' });
+        }
+        // Route to the appropriate handler
+        if (provider === 'github') {
+            return handleGitHub(request, secret, kbId, scopeLogger);
+        }
+        return jsonResponse(404, { error: 'Unknown webhook provider' });
+    };
+}
+async function handleGitHub(request, secret, kbId, scopeLogger) {
+    // Read raw body
+    const rawBody = await readBody(request);
+    // Validate HMAC signature using the secret from the URL
+    const signature = getHeader(request, 'x-hub-signature-256');
+    if (!validateGitHubSignature(rawBody, signature, secret)) {
+        return jsonResponse(401, { error: 'Invalid signature' });
+    }
+    // Replay protection — reject duplicate delivery IDs
+    const deliveryId = getHeader(request, 'x-github-delivery');
+    if (deliveryId && (await isDuplicateDelivery(deliveryId, kbId, 'github'))) {
+        return jsonResponse(200, { status: 'duplicate', deliveryId });
+    }
+    // Parse payload
+    let payload;
+    try {
+        payload = JSON.parse(rawBody);
+    }
+    catch {
+        return jsonResponse(400, { error: 'Invalid JSON' });
+    }
+    const event = getHeader(request, 'x-github-event');
+    const result = parseGitHubPayload(event, payload);
+    if (!result) {
+        // Event type we don't handle — acknowledge without creating triage item
+        return jsonResponse(200, { status: 'ignored' });
+    }
+    return submitResult(kbId, result, scopeLogger);
+}
+/**
+ * Submit a webhook result to the triage queue, checking for duplicates first.
+ */
+async function submitResult(kbId, result, scopeLogger) {
+    // Idempotency check
+    const existing = await findBySourceId(kbId, result.sourceId);
+    if (existing) {
+        return jsonResponse(200, { status: 'duplicate', triageId: existing.id });
+    }
+    const item = await submitTriage(kbId, result.source, result.summary, result.rawPayload, result.sourceId);
+    scopeLogger?.info?.(`Webhook triage item created: ${item.id} (${result.source})`);
+    return jsonResponse(200, { status: 'accepted', triageId: item.id });
+}
+/**
+ * Get a header value from Harper's request, case-insensitive.
+ */
+function getHeader(request, name) {
+    const headers = request.headers;
+    if (!headers)
+        return '';
+    // Try direct access (case-sensitive)
+    const direct = headers[name] ?? headers[name.toLowerCase()];
+    if (direct !== undefined) {
+        return Array.isArray(direct) ? direct[0] : String(direct);
+    }
+    // Try .get() method (Harper's Headers class)
+    if (typeof headers.get === 'function') {
+        const val = headers.get(name);
+        if (val !== undefined && val !== null)
+            return String(val);
+    }
+    // Fallback: iterate to find case-insensitive match
+    const lowerName = name.toLowerCase();
+    if (typeof headers === 'object') {
+        for (const [key, value] of Object.entries(headers)) {
+            if (key.toLowerCase() === lowerName && value !== undefined) {
+                return Array.isArray(value) ? value[0] : String(value);
+            }
+        }
+    }
+    return '';
+}
+function jsonResponse(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'Content-Type': 'application/json' },
+    });
+}
+//# sourceMappingURL=middleware.js.map

package/dist/webhooks/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/webhooks/middleware.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,iBAAiB,IAAI,uBAAuB,EAAE,YAAY,IAAI,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAI/G;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAAC,UAAkB,EAAE,IAAY,EAAE,QAAgB;IACpF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpE,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,SAAS,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CACtC,KAAY;IAEZ,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC;IAEjC,OAAO,KAAK,EAAE,OAAsB,EAAE,IAA8C,EAAoB,EAAE;QACzG,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;QAExC,iCAAiC;QACjC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAED,mBAAmB;QACnB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/B,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,gDAAgD;QAChD,uCAAuC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,YAAY,CAAC,GAAG,EAAE;gBACxB,KAAK,EAAE,gEAAgE;aACvE,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAExB,wDAAwD;QACxD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,mCAAmC;QACnC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC3B,OAAO,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAC1B,OAAsB,EACtB,MAAc,EACd,IAAY,EACZ,WAA4B;IAE5B,gBAAgB;IAChB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IAExC,wDAAwD;IACxD,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAC5D,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1D,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,oDAAoD;IACpD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAC3D,IAAI,UAAU,IAAI,CAAC,MAAM,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,gBAAgB;IAChB,IAAI,OAA4B,CAAC;IACjC,IAAI,CAAC;QACJ,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,wEAAwE;QACxE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,MAAqB,EAAE,WAA4B;IAC5F,oBAAoB;IACpB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzG,WAAW,EAAE,IAAI,EAAE,CAAC,gCAAgC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAElF,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED;;GAEG;AACH,SAAS,SAAS,CAAC,OAAsB,EAAE,IAAY;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB,qCAAqC;IACrC,MAAM,MAAM,GAAI,OAAe,CAAC,IAAI,CAAC,IAAK,OAAe,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,6CAA6C;IAC7C,IAAI,OAAQ,OAAe,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAChD,MAAM,GAAG,GAAI,OAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IAED,mDAAmD;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxD,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,EAAE,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,IAA6B;IAClE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAC/C,CAAC,CAAC;AACJ,CAAC"}

package/dist/webhooks/types.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Shared types for webhook handlers.
+ */
+/**
+ * Result from parsing a webhook payload.
+ * Returned by webhook handlers for the middleware to submit to triage.
+ */
+export interface WebhookResult {
+    /** Source identifier (e.g., "github-webhook") */
+    source: string;
+    /** Deduplication key for idempotency */
+    sourceId: string;
+    /** Human-readable summary for triage review */
+    summary: string;
+    /** Original raw payload */
+    rawPayload: unknown;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/webhooks/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/webhooks/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC7B,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,2BAA2B;IAC3B,UAAU,EAAE,OAAO,CAAC;CACpB"}

package/dist/webhooks/types.js

@@ -0,0 +1,5 @@
+/**
+ * Shared types for webhook handlers.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/webhooks/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/webhooks/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/package.json

@@ -0,0 +1,69 @@
+{
+	"name": "harper-kb",
+	"version": "0.2.0",
+	"description": "Knowledge base plugin for Harper with MCP server integration",
+	"type": "module",
+	"main": "dist/index.js",
+	"types": "dist/index.d.ts",
+	"exports": {
+		".": {
+			"import": "./dist/index.js",
+			"types": "./dist/index.d.ts"
+		},
+		"./config": "./config.yaml"
+	},
+	"scripts": {
+		"build": "tsc",
+		"dev": "tsc --watch",
+		"test": "npm run build && node --test \"test/**/*.test.js\"",
+		"test:watch": "npm run build && node --test --watch \"test/**/*.test.js\"",
+		"test:coverage": "npm run build && node --enable-source-maps --test --experimental-test-coverage --test-coverage-exclude='test/**' --test-coverage-exclude='**/harperdb/**' \"test/**/*.test.js\"",
+		"lint": "oxlint --deny-warnings .",
+		"lint:fix": "oxlint --deny-warnings --fix .",
+		"format": "prettier --write .",
+		"format:check": "prettier --check .",
+		"prepublishOnly": "npm run build"
+	},
+	"keywords": [
+		"harper",
+		"harperdb",
+		"plugin",
+		"knowledge-base",
+		"mcp",
+		"ai",
+		"embeddings",
+		"vector-search"
+	],
+	"author": "Nathan Heskew <nathan@heskew.dev> (https://heskew.dev)",
+	"license": "MIT",
+	"repository": {
+		"type": "git",
+		"url": "https://github.com/heskew/harper-kb"
+	},
+	"dependencies": {
+		"jose": "^6.1.3"
+	},
+	"devDependencies": {
+		"@harperdb/code-guidelines": "^0.0.6",
+		"@types/node": "^22.0.0",
+		"oxlint": "^1.31.0",
+		"prettier": "^3.7.0",
+		"typescript": "^5.7.0"
+	},
+	"optionalDependencies": {
+		"harper-fabric-embeddings": "^0.1.0"
+	},
+	"peerDependencies": {
+		"harperdb": ">=4.7.0"
+	},
+	"engines": {
+		"node": ">=22"
+	},
+	"files": [
+		"dist",
+		"schema",
+		"config.yaml",
+		"README.md",
+		"LICENSE"
+	]
+}

package/schema/knowledge.graphql

@@ -0,0 +1,136 @@
+## Knowledge Base Plugin Schema
+## Defines all tables for the knowledge base in the "kb" database
+
+## Knowledge base registry — one record per tenant
+type KnowledgeBase @table(database: "kb") @export {
+	id: ID @primaryKey
+	name: String
+	description: String
+	settings: Any
+	createdBy: String
+	createdAt: Date @createdTime
+	updatedAt: Date @updatedTime
+}
+
+## Core knowledge entries with vector embeddings for semantic search
+type KnowledgeEntry @table(database: "kb") @export {
+	id: ID @primaryKey
+	kbId: ID @indexed
+	kb: KnowledgeBase @relationship(from: "kbId")
+	title: String @indexed
+	content: String
+	tags: [String]
+	appliesTo: Any
+	source: String
+	sourceUrl: String
+	references: Any
+	confidence: String @indexed
+	addedBy: String
+	reviewedBy: String
+	embedding: [Float] @indexed(type: "HNSW", distance: "cosine")
+	supersedesId: ID
+	supersedes: KnowledgeEntry @relationship(from: "supersedesId")
+	supersededById: ID
+	supersededBy: KnowledgeEntry @relationship(from: "supersededById")
+	siblingIds: [ID]
+	siblings: [KnowledgeEntry] @relationship(from: "siblingIds")
+	relatedIds: [ID]
+	relatedEntries: [KnowledgeEntry] @relationship(from: "relatedIds")
+	metadata: Any
+	deprecated: Boolean @indexed
+	createdAt: Date @createdTime
+	updatedAt: Date @updatedTime
+}
+
+## Webhook intake queue for new knowledge submissions
+## 7-day TTL (604800 seconds)
+type TriageItem @table(database: "kb", expiration: 604800) {
+	id: ID @primaryKey
+	kbId: ID @indexed
+	kb: KnowledgeBase @relationship(from: "kbId")
+	source: String @indexed
+	sourceId: String @indexed
+	rawPayload: Any
+	summary: String
+	status: String @indexed
+	matchedEntryId: ID
+	matchedEntry: KnowledgeEntry @relationship(from: "matchedEntryId")
+	draftEntryId: ID
+	draftEntry: KnowledgeEntry @relationship(from: "draftEntryId")
+	action: String
+	processedBy: String
+	createdAt: Date @createdTime
+	processedAt: Date
+}
+
+## Tag registry with descriptions and usage counts
+type KnowledgeTag @table(database: "kb") {
+	id: ID @primaryKey
+	kbId: ID @indexed
+	kb: KnowledgeBase @relationship(from: "kbId")
+	description: String
+	entryCount: Int
+}
+
+## Search query analytics log
+## 30-day TTL (2592000 seconds)
+type QueryLog @table(database: "kb", expiration: 2592000) {
+	id: ID @primaryKey
+	kbId: ID @indexed
+	kb: KnowledgeBase @relationship(from: "kbId")
+	query: String
+	context: Any
+	source: String
+	resultCount: Int
+	topResultId: ID
+	topResult: KnowledgeEntry @relationship(from: "topResultId")
+	createdAt: Date @createdTime
+}
+
+## API keys for webhooks and service accounts
+type ServiceKey @table(database: "kb") {
+	id: ID @primaryKey
+	kbId: ID @indexed
+	kb: KnowledgeBase @relationship(from: "kbId")
+	name: String
+	keyHash: String
+	role: String
+	permissions: Any
+	createdBy: String
+	createdAt: Date @createdTime
+	lastUsedAt: Date
+}
+
+## Webhook delivery dedup — id is the delivery ID from the provider
+## 1-hour TTL (3600 seconds) — enough to catch replays, auto-cleans
+type WebhookDelivery @table(database: "kb", expiration: 3600) {
+	id: ID @primaryKey
+	kbId: String
+	provider: String
+	createdAt: Date @createdTime
+}
+
+## Webhook endpoint secrets — one per KB+provider, id = SHA-256(secret)
+type WebhookEndpoint @table(database: "kb") @export {
+	id: ID @primaryKey
+	kbId: ID @indexed
+	kb: KnowledgeBase @relationship(from: "kbId")
+	provider: String
+	label: String
+	createdBy: String
+	createdAt: Date @createdTime
+}
+
+## Edit history for knowledge entries — append-only audit log
+type KnowledgeEntryEdit @table(database: "kb") {
+	id: ID @primaryKey
+	kbId: ID @indexed
+	kb: KnowledgeBase @relationship(from: "kbId")
+	entryId: ID @indexed
+	entry: KnowledgeEntry @relationship(from: "entryId")
+	editedBy: String @indexed
+	editSummary: String
+	previousSnapshot: Any
+	changedFields: [String]
+	createdAt: Date @createdTime
+}