hippo-memory 1.2.0 → 1.3.0

package/dist/connectors/github/ratelimit.d.ts

@@ -0,0 +1,20 @@
+/**
+ * GitHub rate-limit header parser.
+ *
+ * GitHub returns 403 for primary rate-limit (with `X-RateLimit-Remaining: 0`
+ * and `X-RateLimit-Reset: <epoch>`) and 429 + `Retry-After: <seconds>` for
+ * secondary rate-limit. Backfill must pause and resume rather than error.
+ */
+export interface RateLimitInfo {
+    readonly sleepSeconds: number;
+    readonly reason: 'primary' | 'secondary' | 'none';
+}
+/**
+ * Parse rate-limit signal from a GitHub HTTP response.
+ *
+ * @param headers Lower-cased HTTP response headers.
+ * @param status  HTTP status code.
+ * @param now     Optional current epoch seconds (for deterministic tests).
+ */
+export declare function parseRateLimit(headers: Record<string, string | undefined>, status: number, now?: number): RateLimitInfo;
+//# sourceMappingURL=ratelimit.d.ts.map

package/dist/connectors/github/ratelimit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ratelimit.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/ratelimit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC;CACnD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC3C,MAAM,EAAE,MAAM,EACd,GAAG,CAAC,EAAE,MAAM,GACX,aAAa,CAkBf"}

package/dist/connectors/github/ratelimit.js

@@ -0,0 +1,31 @@
+/**
+ * GitHub rate-limit header parser.
+ *
+ * GitHub returns 403 for primary rate-limit (with `X-RateLimit-Remaining: 0`
+ * and `X-RateLimit-Reset: <epoch>`) and 429 + `Retry-After: <seconds>` for
+ * secondary rate-limit. Backfill must pause and resume rather than error.
+ */
+/**
+ * Parse rate-limit signal from a GitHub HTTP response.
+ *
+ * @param headers Lower-cased HTTP response headers.
+ * @param status  HTTP status code.
+ * @param now     Optional current epoch seconds (for deterministic tests).
+ */
+export function parseRateLimit(headers, status, now) {
+    const _now = now ?? Math.floor(Date.now() / 1000);
+    if (status === 429) {
+        const retry = Number(headers['retry-after'] ?? '60');
+        return {
+            sleepSeconds: Number.isFinite(retry) && retry >= 0 ? retry : 60,
+            reason: 'secondary',
+        };
+    }
+    if (status === 403 && Number(headers['x-ratelimit-remaining'] ?? '1') === 0) {
+        const reset = Number(headers['x-ratelimit-reset'] ?? '0');
+        const diff = reset - _now;
+        return { sleepSeconds: Math.max(diff, 1), reason: 'primary' };
+    }
+    return { sleepSeconds: 0, reason: 'none' };
+}
+//# sourceMappingURL=ratelimit.js.map

package/dist/connectors/github/ratelimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ratelimit.js","sourceRoot":"","sources":["../../../src/connectors/github/ratelimit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA2C,EAC3C,MAAc,EACd,GAAY;IAEZ,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAElD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,CAAC;QACrD,OAAO;YACL,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YAC/D,MAAM,EAAE,WAAW;SACpB,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC"}

package/dist/connectors/github/scope.d.ts

@@ -0,0 +1,8 @@
+import type { GitHubRepository } from './types.js';
+/**
+ * Map a GitHub repository to a hippo scope string. Default-private when
+ * privacy is undetermined: cost of leaking public into private (recall returns
+ * nothing) << cost of leaking private into public (data exposure).
+ */
+export declare function scopeFromRepository(repo: GitHubRepository | undefined): string;
+//# sourceMappingURL=scope.d.ts.map

package/dist/connectors/github/scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/scope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAI9E"}

package/dist/connectors/github/scope.js

@@ -0,0 +1,13 @@
+/**
+ * Map a GitHub repository to a hippo scope string. Default-private when
+ * privacy is undetermined: cost of leaking public into private (recall returns
+ * nothing) << cost of leaking private into public (data exposure).
+ */
+export function scopeFromRepository(repo) {
+    if (!repo)
+        return 'github:private:unknown';
+    if (repo.private === false)
+        return `github:public:${repo.full_name}`;
+    return `github:private:${repo.full_name}`;
+}
+//# sourceMappingURL=scope.js.map

package/dist/connectors/github/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../../src/connectors/github/scope.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAkC;IACpE,IAAI,CAAC,IAAI;QAAE,OAAO,wBAAwB,CAAC;IAC3C,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,iBAAiB,IAAI,CAAC,SAAS,EAAE,CAAC;IACrE,OAAO,kBAAkB,IAAI,CAAC,SAAS,EAAE,CAAC;AAC5C,CAAC"}

package/dist/connectors/github/signature.d.ts

@@ -0,0 +1,24 @@
+export interface VerifyOpts {
+    rawBody: string;
+    /** Value of X-Hub-Signature-256, e.g. 'sha256=ab12...' */
+    signature: string;
+    webhookSecret: string;
+    /** Previous secret for rotation parity with Slack. Optional. */
+    previousSecret?: string;
+}
+export declare function verifyGitHubSignature(opts: VerifyOpts): boolean;
+/**
+ * Replay-safe idempotency key (codex P0 #3).
+ *
+ * GitHub does NOT sign X-GitHub-Delivery, so an attacker who captures one
+ * signed payload can replay the body with any new delivery UUID. Deriving
+ * idempotency from the delivery_id is unsafe.
+ *
+ * Key = sha256(eventName + ':' + rawBody). Both inputs are tamper-evident:
+ *   - eventName comes from X-GitHub-Event, gated by upstream type guards.
+ *   - rawBody is signed by the HMAC.
+ * A valid replay of (eventName, body) IS the same event. delivery_id is kept
+ * as audit metadata only, not as the dedupe seam.
+ */
+export declare function computeIdempotencyKey(eventName: string, rawBody: string): string;
+//# sourceMappingURL=signature.d.ts.map

package/dist/connectors/github/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/signature.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAWD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAI/D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhF"}

package/dist/connectors/github/signature.js

@@ -0,0 +1,35 @@
+import { createHmac, createHash, timingSafeEqual } from 'crypto';
+function verifyOne(rawBody, signature, secret) {
+    if (!signature.startsWith('sha256='))
+        return false;
+    const expected = `sha256=${createHmac('sha256', secret).update(rawBody).digest('hex')}`;
+    const a = Buffer.from(signature, 'utf8');
+    const b = Buffer.from(expected, 'utf8');
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(a, b);
+}
+export function verifyGitHubSignature(opts) {
+    if (verifyOne(opts.rawBody, opts.signature, opts.webhookSecret))
+        return true;
+    if (opts.previousSecret && verifyOne(opts.rawBody, opts.signature, opts.previousSecret))
+        return true;
+    return false;
+}
+/**
+ * Replay-safe idempotency key (codex P0 #3).
+ *
+ * GitHub does NOT sign X-GitHub-Delivery, so an attacker who captures one
+ * signed payload can replay the body with any new delivery UUID. Deriving
+ * idempotency from the delivery_id is unsafe.
+ *
+ * Key = sha256(eventName + ':' + rawBody). Both inputs are tamper-evident:
+ *   - eventName comes from X-GitHub-Event, gated by upstream type guards.
+ *   - rawBody is signed by the HMAC.
+ * A valid replay of (eventName, body) IS the same event. delivery_id is kept
+ * as audit metadata only, not as the dedupe seam.
+ */
+export function computeIdempotencyKey(eventName, rawBody) {
+    return createHash('sha256').update(`${eventName}:${rawBody}`).digest('hex');
+}
+//# sourceMappingURL=signature.js.map

package/dist/connectors/github/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../../src/connectors/github/signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAWjE,SAAS,SAAS,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAc;IACnE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,QAAQ,GAAG,UAAU,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACxF,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAgB;IACpD,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,IAAI,CAAC,cAAc,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB,EAAE,OAAe;IACtE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/connectors/github/tenant-routing.d.ts

@@ -0,0 +1,33 @@
+import type { DatabaseSyncLike } from '../../db.js';
+export interface ResolveArgs {
+    /** String form of `installation.id`. `null`/`undefined` means "no installation field" (PAT-mode webhook). */
+    installationId?: string | null;
+    /** `repository.full_name` from the webhook envelope, used for PAT-mode multi-tenant routing. */
+    repoFullName?: string | null;
+}
+/**
+ * Resolve the tenant_id for a GitHub webhook envelope.
+ *
+ * Returns:
+ *   - mapped tenant_id when `github_installations` has a row for `installationId`
+ *     (App-mode multi-tenant — primary path)
+ *   - mapped tenant_id when `installation` is absent, `repository.full_name`
+ *     matches a `github_repositories` row (PAT-mode multi-tenant)
+ *   - the deployment's HIPPO_TENANT fallback (or 'default') when BOTH routing
+ *     tables are empty (single-tenant deployment — env fallback is safe)
+ *   - null when:
+ *       - `installationId` is present but unknown AND `github_installations`
+ *         is non-empty (multi-tenant install with foreign installation)
+ *       - `installationId` is missing AND either routing table is non-empty
+ *         AND no `repository.full_name` match (PAT-mode webhook from a foreign
+ *         account — codex P0 #4 regression target)
+ *
+ * Escape hatch: `GITHUB_ALLOW_UNKNOWN_INSTALLATION_FALLBACK=1` restores the
+ * env fallback for emergency rollback only. Mirrors the Slack equivalent
+ * (`SLACK_ALLOW_UNKNOWN_TEAM_FALLBACK`).
+ *
+ * The fail-closed contract lives here so every caller (route handler, CLI
+ * replay, future MCP) gets identical protection.
+ */
+export declare function resolveTenantForGitHub(db: DatabaseSyncLike, args: ResolveArgs): string | null;
+//# sourceMappingURL=tenant-routing.d.ts.map

package/dist/connectors/github/tenant-routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-routing.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/tenant-routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,WAAW;IAC1B,6GAA6G;IAC7G,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,gBAAgB,EACpB,IAAI,EAAE,WAAW,GAChB,MAAM,GAAG,IAAI,CAsCf"}

package/dist/connectors/github/tenant-routing.js

@@ -0,0 +1,61 @@
+/**
+ * Resolve the tenant_id for a GitHub webhook envelope.
+ *
+ * Returns:
+ *   - mapped tenant_id when `github_installations` has a row for `installationId`
+ *     (App-mode multi-tenant — primary path)
+ *   - mapped tenant_id when `installation` is absent, `repository.full_name`
+ *     matches a `github_repositories` row (PAT-mode multi-tenant)
+ *   - the deployment's HIPPO_TENANT fallback (or 'default') when BOTH routing
+ *     tables are empty (single-tenant deployment — env fallback is safe)
+ *   - null when:
+ *       - `installationId` is present but unknown AND `github_installations`
+ *         is non-empty (multi-tenant install with foreign installation)
+ *       - `installationId` is missing AND either routing table is non-empty
+ *         AND no `repository.full_name` match (PAT-mode webhook from a foreign
+ *         account — codex P0 #4 regression target)
+ *
+ * Escape hatch: `GITHUB_ALLOW_UNKNOWN_INSTALLATION_FALLBACK=1` restores the
+ * env fallback for emergency rollback only. Mirrors the Slack equivalent
+ * (`SLACK_ALLOW_UNKNOWN_TEAM_FALLBACK`).
+ *
+ * The fail-closed contract lives here so every caller (route handler, CLI
+ * replay, future MCP) gets identical protection.
+ */
+export function resolveTenantForGitHub(db, args) {
+    const envFallback = () => process.env.HIPPO_TENANT?.trim() || 'default';
+    const escapeHatch = process.env.GITHUB_ALLOW_UNKNOWN_INSTALLATION_FALLBACK === '1';
+    const instCount = db
+        .prepare(`SELECT COUNT(*) AS c FROM github_installations`)
+        .get().c;
+    const repoCount = db
+        .prepare(`SELECT COUNT(*) AS c FROM github_repositories`)
+        .get().c;
+    if (args.installationId) {
+        const row = db
+            .prepare(`SELECT tenant_id FROM github_installations WHERE installation_id = ?`)
+            .get(args.installationId);
+        if (row?.tenant_id)
+            return row.tenant_id;
+        if (Number(instCount) === 0) {
+            // Single-tenant install (table empty); env fallback is safe.
+            return envFallback();
+        }
+        // Multi-tenant install with unknown installation_id — fail closed.
+        return escapeHatch ? envFallback() : null;
+    }
+    // No installation.id (PAT-mode webhook).
+    if (Number(instCount) === 0 && Number(repoCount) === 0) {
+        // Single-tenant deployment with no routing tables populated.
+        return envFallback();
+    }
+    if (args.repoFullName) {
+        const row = db
+            .prepare(`SELECT tenant_id FROM github_repositories WHERE repo_full_name = ? ORDER BY added_at, tenant_id LIMIT 1`)
+            .get(args.repoFullName);
+        if (row?.tenant_id)
+            return row.tenant_id;
+    }
+    return escapeHatch ? envFallback() : null;
+}
+//# sourceMappingURL=tenant-routing.js.map

package/dist/connectors/github/tenant-routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-routing.js","sourceRoot":"","sources":["../../../src/connectors/github/tenant-routing.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,sBAAsB,CACpC,EAAoB,EACpB,IAAiB;IAEjB,MAAM,WAAW,GAAG,GAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,0CAA0C,KAAK,GAAG,CAAC;IAEnF,MAAM,SAAS,GAAI,EAAE;SAClB,OAAO,CAAC,gDAAgD,CAAC;SACzD,GAAG,EAA6B,CAAC,CAAC,CAAC;IACtC,MAAM,SAAS,GAAI,EAAE;SAClB,OAAO,CAAC,+CAA+C,CAAC;SACxD,GAAG,EAA6B,CAAC,CAAC,CAAC;IAEtC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC,sEAAsE,CAAC;aAC/E,GAAG,CAAC,IAAI,CAAC,cAAc,CAAuC,CAAC;QAClE,IAAI,GAAG,EAAE,SAAS;YAAE,OAAO,GAAG,CAAC,SAAS,CAAC;QACzC,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,6DAA6D;YAC7D,OAAO,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,mEAAmE;QACnE,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,yCAAyC;IACzC,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,6DAA6D;QAC7D,OAAO,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CACN,yGAAyG,CAC1G;aACA,GAAG,CAAC,IAAI,CAAC,YAAY,CAAuC,CAAC;QAChE,IAAI,GAAG,EAAE,SAAS;YAAE,OAAO,GAAG,CAAC,SAAS,CAAC;IAC3C,CAAC;IACD,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC"}

package/dist/connectors/github/transform.d.ts

@@ -0,0 +1,7 @@
+import type { RememberOpts } from '../../api.js';
+import type { GitHubIssueEvent, GitHubIssueCommentEvent, GitHubPullRequestEvent, GitHubPullRequestReviewCommentEvent } from './types.js';
+export declare function issueEventToRememberOpts(evt: GitHubIssueEvent): RememberOpts | null;
+export declare function issueCommentEventToRememberOpts(evt: GitHubIssueCommentEvent): RememberOpts | null;
+export declare function pullRequestEventToRememberOpts(evt: GitHubPullRequestEvent): RememberOpts | null;
+export declare function prReviewCommentEventToRememberOpts(evt: GitHubPullRequestReviewCommentEvent): RememberOpts | null;
+//# sourceMappingURL=transform.d.ts.map

package/dist/connectors/github/transform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/transform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,KAAK,EACV,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,mCAAmC,EACpC,MAAM,YAAY,CAAC;AAqBpB,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,gBAAgB,GACpB,YAAY,GAAG,IAAI,CAoBrB;AAED,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,uBAAuB,GAC3B,YAAY,GAAG,IAAI,CAkBrB;AAED,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,sBAAsB,GAC1B,YAAY,GAAG,IAAI,CAoBrB;AAED,wBAAgB,kCAAkC,CAChD,GAAG,EAAE,mCAAmC,GACvC,YAAY,GAAG,IAAI,CAkBrB"}

package/dist/connectors/github/transform.js

@@ -0,0 +1,103 @@
+import { scopeFromRepository } from './scope.js';
+/**
+ * Convert GitHub webhook events into RememberOpts for api.remember(). Each
+ * function returns null when the event has no usable body so the webhook
+ * caller can mark the delivery seen for idempotency and skip the insert.
+ *
+ * Contract (mirrors src/connectors/slack/transform.ts):
+ * - kind is the literal 'raw' (E1.x connector boundary, see src/importers.ts).
+ * - artifact_ref formats are stable; deletion paths look up by these strings.
+ *   - issue:               github://<owner/repo>/issue/<number>
+ *   - issue_comment:       github://<owner/repo>/issue/<number>/comment/<id>
+ *   - pull_request:        github://<owner/repo>/pull/<number>
+ *   - pr_review_comment:   github://<owner/repo>/pull/<number>/review_comment/<id>
+ * - owner is `user:github:<login>`. Required by the v0.40.0 provenance gate.
+ * - scope is derived from repository.private via scopeFromRepository (default
+ *   private when undetermined).
+ */
+const UNKNOWN_REPO = 'unknown/unknown';
+export function issueEventToRememberOpts(evt) {
+    const body = evt.issue.body?.trim();
+    const title = evt.issue.title?.trim();
+    const text = [title, body].filter(Boolean).join('\n\n');
+    if (!text)
+        return null;
+    const repoFull = evt.repository?.full_name ?? UNKNOWN_REPO;
+    const login = evt.issue.user.login;
+    return {
+        content: text,
+        kind: 'raw',
+        scope: scopeFromRepository(evt.repository),
+        artifactRef: `github://${repoFull}/issue/${evt.issue.number}`,
+        owner: `user:github:${login}`,
+        tags: [
+            'source:github',
+            `repo:${repoFull}`,
+            `event:issues.${evt.action}`,
+            `user:github:${login}`,
+        ],
+    };
+}
+export function issueCommentEventToRememberOpts(evt) {
+    const text = evt.comment.body?.trim();
+    if (!text)
+        return null;
+    const repoFull = evt.repository?.full_name ?? UNKNOWN_REPO;
+    const login = evt.comment.user.login;
+    return {
+        content: text,
+        kind: 'raw',
+        scope: scopeFromRepository(evt.repository),
+        artifactRef: `github://${repoFull}/issue/${evt.issue.number}/comment/${evt.comment.id}`,
+        owner: `user:github:${login}`,
+        tags: [
+            'source:github',
+            `repo:${repoFull}`,
+            `event:issue_comment.${evt.action}`,
+            `user:github:${login}`,
+        ],
+    };
+}
+export function pullRequestEventToRememberOpts(evt) {
+    const body = evt.pull_request.body?.trim();
+    const title = evt.pull_request.title?.trim();
+    const text = [title, body].filter(Boolean).join('\n\n');
+    if (!text)
+        return null;
+    const repoFull = evt.repository?.full_name ?? UNKNOWN_REPO;
+    const login = evt.pull_request.user.login;
+    return {
+        content: text,
+        kind: 'raw',
+        scope: scopeFromRepository(evt.repository),
+        artifactRef: `github://${repoFull}/pull/${evt.pull_request.number}`,
+        owner: `user:github:${login}`,
+        tags: [
+            'source:github',
+            `repo:${repoFull}`,
+            `event:pull_request.${evt.action}`,
+            `user:github:${login}`,
+        ],
+    };
+}
+export function prReviewCommentEventToRememberOpts(evt) {
+    const text = evt.comment.body?.trim();
+    if (!text)
+        return null;
+    const repoFull = evt.repository?.full_name ?? UNKNOWN_REPO;
+    const login = evt.comment.user.login;
+    return {
+        content: text,
+        kind: 'raw',
+        scope: scopeFromRepository(evt.repository),
+        artifactRef: `github://${repoFull}/pull/${evt.pull_request.number}/review_comment/${evt.comment.id}`,
+        owner: `user:github:${login}`,
+        tags: [
+            'source:github',
+            `repo:${repoFull}`,
+            `event:pull_request_review_comment.${evt.action}`,
+            `user:github:${login}`,
+        ],
+    };
+}
+//# sourceMappingURL=transform.js.map

package/dist/connectors/github/transform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform.js","sourceRoot":"","sources":["../../../src/connectors/github/transform.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAQjD;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAEvC,MAAM,UAAU,wBAAwB,CACtC,GAAqB;IAErB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,YAAY,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;IACnC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,WAAW,EAAE,YAAY,QAAQ,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE;QAC7D,KAAK,EAAE,eAAe,KAAK,EAAE;QAC7B,IAAI,EAAE;YACJ,eAAe;YACf,QAAQ,QAAQ,EAAE;YAClB,gBAAgB,GAAG,CAAC,MAAM,EAAE;YAC5B,eAAe,KAAK,EAAE;SACvB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,GAA4B;IAE5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,YAAY,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;IACrC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,WAAW,EAAE,YAAY,QAAQ,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;QACvF,KAAK,EAAE,eAAe,KAAK,EAAE;QAC7B,IAAI,EAAE;YACJ,eAAe;YACf,QAAQ,QAAQ,EAAE;YAClB,uBAAuB,GAAG,CAAC,MAAM,EAAE;YACnC,eAAe,KAAK,EAAE;SACvB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,GAA2B;IAE3B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,YAAY,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,WAAW,EAAE,YAAY,QAAQ,SAAS,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE;QACnE,KAAK,EAAE,eAAe,KAAK,EAAE;QAC7B,IAAI,EAAE;YACJ,eAAe;YACf,QAAQ,QAAQ,EAAE;YAClB,sBAAsB,GAAG,CAAC,MAAM,EAAE;YAClC,eAAe,KAAK,EAAE;SACvB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,GAAwC;IAExC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,YAAY,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;IACrC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,WAAW,EAAE,YAAY,QAAQ,SAAS,GAAG,CAAC,YAAY,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;QACpG,KAAK,EAAE,eAAe,KAAK,EAAE;QAC7B,IAAI,EAAE;YACJ,eAAe;YACf,QAAQ,QAAQ,EAAE;YAClB,qCAAqC,GAAG,CAAC,MAAM,EAAE;YACjD,eAAe,KAAK,EAAE;SACvB;KACF,CAAC;AACJ,CAAC"}

package/dist/connectors/github/types.d.ts

@@ -0,0 +1,87 @@
+/**
+ * GitHub webhook event shapes used by the ingestion connector.
+ * Spec: https://docs.github.com/en/webhooks/webhook-events-and-payloads
+ *
+ * V1 cares about four event types: issues, issue_comment, pull_request,
+ * pull_request_review_comment. Each guard is gated on the X-GitHub-Event
+ * header value so a malicious or misrouted payload cannot satisfy a guard
+ * for the wrong event type.
+ */
+/**
+ * Codex P1 #7: `private` MUST be optional, not required. The Slack-style
+ * fail-safe in scope.ts requires an envelope with `private: undefined` to
+ * map to private; a strict boolean type would reject the payload before
+ * scope can fail closed.
+ */
+export interface GitHubRepository {
+    full_name: string;
+    private?: boolean;
+    owner: {
+        login: string;
+    };
+    name: string;
+    id?: number;
+}
+export interface GitHubSender {
+    login: string;
+    id: number;
+}
+export interface GitHubInstallation {
+    id: number;
+}
+export interface GitHubWebhookEnvelope {
+    action?: string;
+    repository?: GitHubRepository;
+    sender?: GitHubSender;
+    installation?: GitHubInstallation;
+}
+export interface GitHubIssueEvent extends GitHubWebhookEnvelope {
+    action: 'opened' | 'edited' | 'closed' | 'reopened' | 'deleted';
+    issue: {
+        number: number;
+        title: string;
+        body: string | null;
+        user: GitHubSender;
+        updated_at?: string;
+    };
+}
+export interface GitHubIssueCommentEvent extends GitHubWebhookEnvelope {
+    action: 'created' | 'edited' | 'deleted';
+    issue: {
+        number: number;
+    };
+    comment: {
+        id: number;
+        body: string | null;
+        user: GitHubSender;
+        updated_at?: string;
+    };
+}
+export interface GitHubPullRequestEvent extends GitHubWebhookEnvelope {
+    action: 'opened' | 'edited' | 'closed' | 'reopened' | 'synchronize' | 'ready_for_review';
+    pull_request: {
+        number: number;
+        title: string;
+        body: string | null;
+        user: GitHubSender;
+        updated_at?: string;
+    };
+}
+export interface GitHubPullRequestReviewCommentEvent extends GitHubWebhookEnvelope {
+    action: 'created' | 'edited' | 'deleted';
+    pull_request: {
+        number: number;
+    };
+    comment: {
+        id: number;
+        body: string | null;
+        user: GitHubSender;
+        updated_at?: string;
+    };
+}
+export declare function isGitHubWebhookEnvelope(x: unknown): x is GitHubWebhookEnvelope;
+export declare function isGitHubIssueEvent(x: unknown, evtHeader: string): x is GitHubIssueEvent;
+export declare function isGitHubIssueCommentEvent(x: unknown, evtHeader: string): x is GitHubIssueCommentEvent;
+export declare function isGitHubPullRequestEvent(x: unknown, evtHeader: string): x is GitHubPullRequestEvent;
+export declare function isGitHubPullRequestReviewCommentEvent(x: unknown, evtHeader: string): x is GitHubPullRequestReviewCommentEvent;
+//# sourceMappingURL=types.d.ts.map

package/dist/connectors/github/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,gBAAiB,SAAQ,qBAAqB;IAC7D,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;IAChE,KAAK,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,IAAI,EAAE,YAAY,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,uBAAwB,SAAQ,qBAAqB;IACpE,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,IAAI,EAAE,YAAY,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,sBAAuB,SAAQ,qBAAqB;IACnE,MAAM,EACF,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,aAAa,GACb,kBAAkB,CAAC;IACvB,YAAY,EAAE;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,IAAI,EAAE,YAAY,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,mCAAoC,SAAQ,qBAAqB;IAChF,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzC,YAAY,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACjC,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QACpB,IAAI,EAAE,YAAY,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAWD,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,qBAAqB,CAI9E;AAED,wBAAgB,kBAAkB,CAChC,CAAC,EAAE,OAAO,EACV,SAAS,EAAE,MAAM,GAChB,CAAC,IAAI,gBAAgB,CASvB;AAED,wBAAgB,yBAAyB,CACvC,CAAC,EAAE,OAAO,EACV,SAAS,EAAE,MAAM,GAChB,CAAC,IAAI,uBAAuB,CAW9B;AAED,wBAAgB,wBAAwB,CACtC,CAAC,EAAE,OAAO,EACV,SAAS,EAAE,MAAM,GAChB,CAAC,IAAI,sBAAsB,CAS7B;AAED,wBAAgB,qCAAqC,CACnD,CAAC,EAAE,OAAO,EACV,SAAS,EAAE,MAAM,GAChB,CAAC,IAAI,mCAAmC,CAW1C"}

package/dist/connectors/github/types.js

@@ -0,0 +1,94 @@
+/**
+ * GitHub webhook event shapes used by the ingestion connector.
+ * Spec: https://docs.github.com/en/webhooks/webhook-events-and-payloads
+ *
+ * V1 cares about four event types: issues, issue_comment, pull_request,
+ * pull_request_review_comment. Each guard is gated on the X-GitHub-Event
+ * header value so a malicious or misrouted payload cannot satisfy a guard
+ * for the wrong event type.
+ */
+function isObject(x) {
+    return !!x && typeof x === 'object';
+}
+function hasSenderShape(x) {
+    if (!isObject(x))
+        return false;
+    return typeof x.login === 'string' && typeof x.id === 'number';
+}
+export function isGitHubWebhookEnvelope(x) {
+    if (!isObject(x))
+        return false;
+    // Duck-type: an envelope must at least carry an action OR a repository field.
+    return typeof x.action === 'string' || isObject(x.repository);
+}
+export function isGitHubIssueEvent(x, evtHeader) {
+    if (evtHeader !== 'issues')
+        return false;
+    if (!isObject(x))
+        return false;
+    if (typeof x.action !== 'string')
+        return false;
+    const issue = x.issue;
+    if (!isObject(issue))
+        return false;
+    if (typeof issue.number !== 'number')
+        return false;
+    if (!hasSenderShape(issue.user))
+        return false;
+    return true;
+}
+export function isGitHubIssueCommentEvent(x, evtHeader) {
+    if (evtHeader !== 'issue_comment')
+        return false;
+    if (!isObject(x))
+        return false;
+    if (typeof x.action !== 'string')
+        return false;
+    const issue = x.issue;
+    if (!isObject(issue) || typeof issue.number !== 'number')
+        return false;
+    const comment = x.comment;
+    if (!isObject(comment))
+        return false;
+    if (typeof comment.id !== 'number')
+        return false;
+    if (!hasSenderShape(comment.user))
+        return false;
+    return true;
+}
+export function isGitHubPullRequestEvent(x, evtHeader) {
+    if (evtHeader !== 'pull_request')
+        return false;
+    if (!isObject(x))
+        return false;
+    if (typeof x.action !== 'string')
+        return false;
+    const pr = x.pull_request;
+    if (!isObject(pr))
+        return false;
+    if (typeof pr.number !== 'number')
+        return false;
+    if (!hasSenderShape(pr.user))
+        return false;
+    return true;
+}
+export function isGitHubPullRequestReviewCommentEvent(x, evtHeader) {
+    if (evtHeader !== 'pull_request_review_comment')
+        return false;
+    if (!isObject(x))
+        return false;
+    if (typeof x.action !== 'string')
+        return false;
+    const pr = x.pull_request;
+    if (!isObject(pr) || typeof pr.number !== 'number')
+        return false;
+    const comment = x.comment;
+    if (!isObject(comment))
+        return false;
+    if (typeof comment.id !== 'number')
+        return false;
+    if (!hasSenderShape(comment.user))
+        return false;
+    return true;
+}
+//# sourceMappingURL=types.js.map

package/dist/connectors/github/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/connectors/github/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkFH,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;AACtC,CAAC;AAED,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,CAAU;IAChD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,8EAA8E;IAC9E,OAAO,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,CAAU,EACV,SAAiB;IAEjB,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IACtB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,CAAU,EACV,SAAiB;IAEjB,IAAI,SAAS,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IACtB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvE,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IAC1B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,CAAU,EACV,SAAiB;IAEjB,IAAI,SAAS,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1B,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,CAAU,EACV,SAAiB;IAEjB,IAAI,SAAS,KAAK,6BAA6B;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1B,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjE,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IAC1B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/db.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAQA,UAAU,iBAAiB;IACzB,GAAG,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG;QAAE,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,GAAG,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACnC,GAAG,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAC;IACxC,KAAK,IAAI,IAAI,CAAC;CACf;AA+tBD,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,CA2B/D;AAkCD,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,gBAAgB,GAAG,MAAM,CAI7D;AAwDD,wBAAgB,YAAY,CAAC,EAAE,EAAE,gBAAgB,GAAG,IAAI,CAEvD;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAK,GAAG,MAAM,CAGhF;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAE9E;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,gBAAgB,GAAG,OAAO,CAE5D;AAED,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAI,SAAK,GAAG,IAAI,CAS5E"}
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAQA,UAAU,iBAAiB;IACzB,GAAG,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG;QAAE,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,GAAG,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACnC,GAAG,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAC;IACxC,KAAK,IAAI,IAAI,CAAC;CACf;AA4yBD,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD;AAED,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,CA2B/D;AAkCD,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,gBAAgB,GAAG,MAAM,CAI7D;AAwDD,wBAAgB,YAAY,CAAC,EAAE,EAAE,gBAAgB,GAAG,IAAI,CAEvD;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAK,GAAG,MAAM,CAGhF;AAED,wBAAgB,OAAO,CAAC,EAAE,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAE9E;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,gBAAgB,GAAG,OAAO,CAE5D;AAED,wBAAgB,sBAAsB,CAAC,EAAE,EAAE,gBAAgB,EAAE,IAAI,SAAK,GAAG,IAAI,CAS5E"}