hippo-memory 1.2.1 → 1.3.1

package/dist/connectors/github/ingest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ingest.js","sourceRoot":"","sources":["../../../src/connectors/github/ingest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,QAAQ,EAAmC,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAyB,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC5F,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,wBAAwB,EACxB,+BAA+B,EAC/B,8BAA8B,EAC9B,kCAAkC,GACnC,MAAM,gBAAgB,CAAC;AA4CxB,SAAS,cAAc,CAAC,KAAkB;IACxC,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC;QACxB,KAAK,QAAQ;YACX,OAAO,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjD,KAAK,eAAe;YAClB,OAAO,+BAA+B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxD,KAAK,cAAc;YACjB,OAAO,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,KAAK,6BAA6B;YAChC,OAAO,kCAAkC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,KAAkB;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,IAAI,iBAAiB,CAAC;IACtE,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC;QACxB,KAAK,QAAQ;YACX,OAAO,YAAY,IAAI,UAAU,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAChE,KAAK,eAAe;YAClB,OAAO,YAAY,IAAI,UAAU,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACpG,KAAK,cAAc;YACjB,OAAO,YAAY,IAAI,SAAS,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QACtE,KAAK,6BAA6B;YAChC,OAAO,YAAY,IAAI,SAAS,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,mBAAmB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IACnH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAkB;IACxC,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC;QACxB,KAAK,QAAQ;YACX,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC;QAChD,KAAK,eAAe;YAClB,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;QAClD,KAAK,cAAc;YACjB,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,IAAI,IAAI,CAAC;QACvD,KAAK,6BAA6B;YAChC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;IACpD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAY,EAAE,KAAkB;IAC1D,MAAM,cAAc,GAAG,qBAAqB,CAC1C,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAC7B,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAC5B,CAAC;IAEF,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,CAAC,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC;QAClF,CAAC;IACH,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAEzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,uEAAuE;QACvE,oEAAoE;QACpE,wCAAwC;QACxC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,GAAG;iBACA,OAAO,CACN,kIAAkI,CACnI;iBACA,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;QAClG,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED,8DAA8D;IAC9D,kCAAkC;IAClC,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,0DAA0D;IAC1D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CACrB,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,kBAAkB,EAAE,EAClD;YACE,GAAG,IAAI;YACP,UAAU,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;gBAChC,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;oBAChC,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM,QAAQ,GAAG,OAAO;qBACrB,OAAO,CACN,kIAAkI,CACnI;qBACA,GAAG,CACF,cAAc,EACd,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,KAAK,CAAC,SAAS,EACrB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACxB,QAAQ,CACT,CAAC;gBACJ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,yBAAyB,CAAC,cAAc,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;SACF,CACF,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IACrD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,yBAAyB,EAAE,CAAC;YAC3C,mEAAmE;YACnE,0DAA0D;YAC1D,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,iBAAiB,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,CAAC;YAC3F,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/connectors/github/octokit-client.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Octokit-shaped HTTP fetcher for the GitHub connector backfill.
+ *
+ * Production uses `realGitHubFetcher` against `https://api.github.com`.
+ * Tests inject a fake `GitHubFetcher` so they never hit the network.
+ *
+ * Codex P1 #4 mandate: any non-200 response that is NOT a recognized
+ * rate-limit pause MUST throw `GitHubFetchError`. Silently turning
+ * 401/403/404/500 into empty pages produced empty backfills with no
+ * operator signal, so this code path is now load-bearing.
+ */
+import { type RateLimitInfo } from './ratelimit.js';
+export declare class GitHubFetchError extends Error {
+    readonly status: number;
+    readonly bodyExcerpt: string;
+    readonly url: string;
+    constructor(status: number, bodyExcerpt: string, url: string);
+}
+export interface GitHubBackfillPage {
+    readonly items: ReadonlyArray<unknown>;
+    readonly next: string | null;
+    readonly rateLimit: RateLimitInfo;
+}
+export type GitHubFetcher = (args: {
+    url: string;
+    token: string;
+}) => Promise<GitHubBackfillPage>;
+/**
+ * Parse the rel="next" URL from an RFC 5988 `Link` header.
+ *
+ * Header format: `<url1>; rel="next", <url2>; rel="last"`.
+ * Returns the URL whose rel parameter is exactly `"next"`, or null.
+ */
+export declare function parseNextLink(linkHeader: string): string | null;
+export declare const realGitHubFetcher: GitHubFetcher;
+//# sourceMappingURL=octokit-client.d.ts.map

package/dist/connectors/github/octokit-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"octokit-client.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/octokit-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpE,qBAAa,gBAAiB,SAAQ,KAAK;IAEvC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM;gBAFX,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM;CAKvB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;CACnC;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAElC;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK/D;AAUD,eAAO,MAAM,iBAAiB,EAAE,aAsB/B,CAAC"}

package/dist/connectors/github/octokit-client.js

@@ -0,0 +1,65 @@
+/**
+ * Octokit-shaped HTTP fetcher for the GitHub connector backfill.
+ *
+ * Production uses `realGitHubFetcher` against `https://api.github.com`.
+ * Tests inject a fake `GitHubFetcher` so they never hit the network.
+ *
+ * Codex P1 #4 mandate: any non-200 response that is NOT a recognized
+ * rate-limit pause MUST throw `GitHubFetchError`. Silently turning
+ * 401/403/404/500 into empty pages produced empty backfills with no
+ * operator signal, so this code path is now load-bearing.
+ */
+import { parseRateLimit } from './ratelimit.js';
+export class GitHubFetchError extends Error {
+    status;
+    bodyExcerpt;
+    url;
+    constructor(status, bodyExcerpt, url) {
+        super(`GitHub ${status} on ${url}: ${bodyExcerpt}`);
+        this.status = status;
+        this.bodyExcerpt = bodyExcerpt;
+        this.url = url;
+        this.name = 'GitHubFetchError';
+    }
+}
+/**
+ * Parse the rel="next" URL from an RFC 5988 `Link` header.
+ *
+ * Header format: `<url1>; rel="next", <url2>; rel="last"`.
+ * Returns the URL whose rel parameter is exactly `"next"`, or null.
+ */
+export function parseNextLink(linkHeader) {
+    if (!linkHeader)
+        return null;
+    const re = /<([^>]+)>\s*;\s*rel="next"/;
+    const m = linkHeader.match(re);
+    return m ? m[1] : null;
+}
+function headersToRecord(h) {
+    const out = {};
+    h.forEach((v, k) => {
+        out[k.toLowerCase()] = v;
+    });
+    return out;
+}
+export const realGitHubFetcher = async ({ url, token }) => {
+    const res = await fetch(url, {
+        headers: {
+            Authorization: `Bearer ${token}`,
+            Accept: 'application/vnd.github+json',
+            'X-GitHub-Api-Version': '2022-11-28',
+        },
+    });
+    const headers = headersToRecord(res.headers);
+    const rateLimit = parseRateLimit(headers, res.status);
+    // Codex P1 #4: don't silently turn 401/403/404/500 into empty pages.
+    if (res.status !== 200 && rateLimit.reason === 'none') {
+        const body = await res.text().catch(() => '');
+        throw new GitHubFetchError(res.status, body.slice(0, 256), url);
+    }
+    const items = res.status === 200 ? (await res.json()) : [];
+    const link = res.headers.get('link') ?? '';
+    const next = parseNextLink(link);
+    return { items, next, rateLimit };
+};
+//# sourceMappingURL=octokit-client.js.map

package/dist/connectors/github/octokit-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"octokit-client.js","sourceRoot":"","sources":["../../../src/connectors/github/octokit-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,cAAc,EAAsB,MAAM,gBAAgB,CAAC;AAEpE,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAE9B;IACA;IACA;IAHX,YACW,MAAc,EACd,WAAmB,EACnB,GAAW;QAEpB,KAAK,CAAC,UAAU,MAAM,OAAO,GAAG,KAAK,WAAW,EAAE,CAAC,CAAC;QAJ3C,WAAM,GAAN,MAAM,CAAQ;QACd,gBAAW,GAAX,WAAW,CAAQ;QACnB,QAAG,GAAH,GAAG,CAAQ;QAGpB,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAaD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,EAAE,GAAG,4BAA4B,CAAC;IACxC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,CAAU;IACjC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACjB,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAkB,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;IACvE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,MAAM,EAAE,6BAA6B;YACrC,sBAAsB,EAAE,YAAY;SACrC;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAEtD,qEAAqE;IACrE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,KAAK,GACT,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC,CAAC"}

package/dist/connectors/github/ratelimit.d.ts

@@ -0,0 +1,20 @@
+/**
+ * GitHub rate-limit header parser.
+ *
+ * GitHub returns 403 for primary rate-limit (with `X-RateLimit-Remaining: 0`
+ * and `X-RateLimit-Reset: <epoch>`) and 429 + `Retry-After: <seconds>` for
+ * secondary rate-limit. Backfill must pause and resume rather than error.
+ */
+export interface RateLimitInfo {
+    readonly sleepSeconds: number;
+    readonly reason: 'primary' | 'secondary' | 'none';
+}
+/**
+ * Parse rate-limit signal from a GitHub HTTP response.
+ *
+ * @param headers Lower-cased HTTP response headers.
+ * @param status  HTTP status code.
+ * @param now     Optional current epoch seconds (for deterministic tests).
+ */
+export declare function parseRateLimit(headers: Record<string, string | undefined>, status: number, now?: number): RateLimitInfo;
+//# sourceMappingURL=ratelimit.d.ts.map

package/dist/connectors/github/ratelimit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ratelimit.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/ratelimit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,MAAM,CAAC;CACnD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC3C,MAAM,EAAE,MAAM,EACd,GAAG,CAAC,EAAE,MAAM,GACX,aAAa,CAkBf"}

package/dist/connectors/github/ratelimit.js

@@ -0,0 +1,31 @@
+/**
+ * GitHub rate-limit header parser.
+ *
+ * GitHub returns 403 for primary rate-limit (with `X-RateLimit-Remaining: 0`
+ * and `X-RateLimit-Reset: <epoch>`) and 429 + `Retry-After: <seconds>` for
+ * secondary rate-limit. Backfill must pause and resume rather than error.
+ */
+/**
+ * Parse rate-limit signal from a GitHub HTTP response.
+ *
+ * @param headers Lower-cased HTTP response headers.
+ * @param status  HTTP status code.
+ * @param now     Optional current epoch seconds (for deterministic tests).
+ */
+export function parseRateLimit(headers, status, now) {
+    const _now = now ?? Math.floor(Date.now() / 1000);
+    if (status === 429) {
+        const retry = Number(headers['retry-after'] ?? '60');
+        return {
+            sleepSeconds: Number.isFinite(retry) && retry >= 0 ? retry : 60,
+            reason: 'secondary',
+        };
+    }
+    if (status === 403 && Number(headers['x-ratelimit-remaining'] ?? '1') === 0) {
+        const reset = Number(headers['x-ratelimit-reset'] ?? '0');
+        const diff = reset - _now;
+        return { sleepSeconds: Math.max(diff, 1), reason: 'primary' };
+    }
+    return { sleepSeconds: 0, reason: 'none' };
+}
+//# sourceMappingURL=ratelimit.js.map

package/dist/connectors/github/ratelimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ratelimit.js","sourceRoot":"","sources":["../../../src/connectors/github/ratelimit.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA2C,EAC3C,MAAc,EACd,GAAY;IAEZ,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAElD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,CAAC;QACrD,OAAO;YACL,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YAC/D,MAAM,EAAE,WAAW;SACpB,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC"}

package/dist/connectors/github/scope.d.ts

@@ -0,0 +1,8 @@
+import type { GitHubRepository } from './types.js';
+/**
+ * Map a GitHub repository to a hippo scope string. Default-private when
+ * privacy is undetermined: cost of leaking public into private (recall returns
+ * nothing) << cost of leaking private into public (data exposure).
+ */
+export declare function scopeFromRepository(repo: GitHubRepository | undefined): string;
+//# sourceMappingURL=scope.d.ts.map

package/dist/connectors/github/scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/scope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,SAAS,GAAG,MAAM,CAI9E"}

package/dist/connectors/github/scope.js

@@ -0,0 +1,13 @@
+/**
+ * Map a GitHub repository to a hippo scope string. Default-private when
+ * privacy is undetermined: cost of leaking public into private (recall returns
+ * nothing) << cost of leaking private into public (data exposure).
+ */
+export function scopeFromRepository(repo) {
+    if (!repo)
+        return 'github:private:unknown';
+    if (repo.private === false)
+        return `github:public:${repo.full_name}`;
+    return `github:private:${repo.full_name}`;
+}
+//# sourceMappingURL=scope.js.map

package/dist/connectors/github/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../../src/connectors/github/scope.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAkC;IACpE,IAAI,CAAC,IAAI;QAAE,OAAO,wBAAwB,CAAC;IAC3C,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,iBAAiB,IAAI,CAAC,SAAS,EAAE,CAAC;IACrE,OAAO,kBAAkB,IAAI,CAAC,SAAS,EAAE,CAAC;AAC5C,CAAC"}

package/dist/connectors/github/signature.d.ts

@@ -0,0 +1,47 @@
+export interface VerifyOpts {
+    rawBody: string;
+    /** Value of X-Hub-Signature-256, e.g. 'sha256=ab12...' */
+    signature: string;
+    webhookSecret: string;
+    /** Previous secret for rotation parity with Slack. Optional. */
+    previousSecret?: string;
+}
+export declare function verifyGitHubSignature(opts: VerifyOpts): boolean;
+/**
+ * Source-aware idempotency key. v1.3.1 hotfix (codex round 1 P0 #3 + claude
+ * round 2 P0 #3).
+ *
+ * Round 1 design: sha256(eventName + ':' + rawBody) so an attacker rotating
+ * X-GitHub-Delivery cannot bypass dedupe.
+ *
+ * Round 2 found that key produced different hashes for the SAME source event
+ * delivered via webhook vs via REST backfill, because backfill rawBody is the
+ * REST list-item shape while webhook rawBody is the envelope. Result:
+ * backfill + later webhook of the same issue created two `kind='raw'` rows
+ * with the same artifact_ref. Combined with the deletion bug, deletion could
+ * not archive both.
+ *
+ * v1.3.1 fix: key from the SOURCE-NORMALIZED identifier — artifact_ref plus
+ * the source-side updated_at timestamp. Same artifact + same revision = same
+ * key, regardless of which path delivered it. Different revisions of the same
+ * issue (an edit) get different keys, which is correct: each edit IS a new
+ * memory revision.
+ *
+ * Both inputs are upstream-derived from the parsed event, not from the
+ * unsigned delivery header — replay attacks still cannot bypass dedupe.
+ *
+ * Inputs:
+ *   - artifactRef: e.g. 'github://acme/repo/issue/42' or
+ *     'github://acme/repo/issue/42/comment/123'.
+ *   - updatedAt: source-side ISO timestamp (issue.updated_at,
+ *     comment.updated_at, pull_request.updated_at). Empty string when the
+ *     payload omits it (rare; older REST shapes).
+ *
+ * Migration note for v1.3.0 → v1.3.1: existing github_event_log rows from
+ * v1.3.0 used the round-1 key shape and will not collide with v1.3.1 keys.
+ * The first webhook delivery after upgrading creates a new log row with the
+ * new key. This is acceptable for a hotfix (no production users on v1.3.0)
+ * and correct semantics going forward.
+ */
+export declare function computeIdempotencyKey(artifactRef: string, updatedAt: string | null | undefined): string;
+//# sourceMappingURL=signature.d.ts.map

package/dist/connectors/github/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/signature.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gEAAgE;IAChE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAWD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAI/D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAEvG"}

package/dist/connectors/github/signature.js

@@ -0,0 +1,58 @@
+import { createHmac, createHash, timingSafeEqual } from 'crypto';
+function verifyOne(rawBody, signature, secret) {
+    if (!signature.startsWith('sha256='))
+        return false;
+    const expected = `sha256=${createHmac('sha256', secret).update(rawBody).digest('hex')}`;
+    const a = Buffer.from(signature, 'utf8');
+    const b = Buffer.from(expected, 'utf8');
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(a, b);
+}
+export function verifyGitHubSignature(opts) {
+    if (verifyOne(opts.rawBody, opts.signature, opts.webhookSecret))
+        return true;
+    if (opts.previousSecret && verifyOne(opts.rawBody, opts.signature, opts.previousSecret))
+        return true;
+    return false;
+}
+/**
+ * Source-aware idempotency key. v1.3.1 hotfix (codex round 1 P0 #3 + claude
+ * round 2 P0 #3).
+ *
+ * Round 1 design: sha256(eventName + ':' + rawBody) so an attacker rotating
+ * X-GitHub-Delivery cannot bypass dedupe.
+ *
+ * Round 2 found that key produced different hashes for the SAME source event
+ * delivered via webhook vs via REST backfill, because backfill rawBody is the
+ * REST list-item shape while webhook rawBody is the envelope. Result:
+ * backfill + later webhook of the same issue created two `kind='raw'` rows
+ * with the same artifact_ref. Combined with the deletion bug, deletion could
+ * not archive both.
+ *
+ * v1.3.1 fix: key from the SOURCE-NORMALIZED identifier — artifact_ref plus
+ * the source-side updated_at timestamp. Same artifact + same revision = same
+ * key, regardless of which path delivered it. Different revisions of the same
+ * issue (an edit) get different keys, which is correct: each edit IS a new
+ * memory revision.
+ *
+ * Both inputs are upstream-derived from the parsed event, not from the
+ * unsigned delivery header — replay attacks still cannot bypass dedupe.
+ *
+ * Inputs:
+ *   - artifactRef: e.g. 'github://acme/repo/issue/42' or
+ *     'github://acme/repo/issue/42/comment/123'.
+ *   - updatedAt: source-side ISO timestamp (issue.updated_at,
+ *     comment.updated_at, pull_request.updated_at). Empty string when the
+ *     payload omits it (rare; older REST shapes).
+ *
+ * Migration note for v1.3.0 → v1.3.1: existing github_event_log rows from
+ * v1.3.0 used the round-1 key shape and will not collide with v1.3.1 keys.
+ * The first webhook delivery after upgrading creates a new log row with the
+ * new key. This is acceptable for a hotfix (no production users on v1.3.0)
+ * and correct semantics going forward.
+ */
+export function computeIdempotencyKey(artifactRef, updatedAt) {
+    return createHash('sha256').update(`${artifactRef}:${updatedAt ?? ''}`).digest('hex');
+}
+//# sourceMappingURL=signature.js.map

package/dist/connectors/github/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../../src/connectors/github/signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAWjE,SAAS,SAAS,CAAC,OAAe,EAAE,SAAiB,EAAE,MAAc;IACnE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,QAAQ,GAAG,UAAU,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACxF,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAgB;IACpD,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,IAAI,CAAC,cAAc,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAmB,EAAE,SAAoC;IAC7F,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,WAAW,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxF,CAAC"}

package/dist/connectors/github/tenant-routing.d.ts

@@ -0,0 +1,33 @@
+import type { DatabaseSyncLike } from '../../db.js';
+export interface ResolveArgs {
+    /** String form of `installation.id`. `null`/`undefined` means "no installation field" (PAT-mode webhook). */
+    installationId?: string | null;
+    /** `repository.full_name` from the webhook envelope, used for PAT-mode multi-tenant routing. */
+    repoFullName?: string | null;
+}
+/**
+ * Resolve the tenant_id for a GitHub webhook envelope.
+ *
+ * Returns:
+ *   - mapped tenant_id when `github_installations` has a row for `installationId`
+ *     (App-mode multi-tenant — primary path)
+ *   - mapped tenant_id when `installation` is absent, `repository.full_name`
+ *     matches a `github_repositories` row (PAT-mode multi-tenant)
+ *   - the deployment's HIPPO_TENANT fallback (or 'default') when BOTH routing
+ *     tables are empty (single-tenant deployment — env fallback is safe)
+ *   - null when:
+ *       - `installationId` is present but unknown AND `github_installations`
+ *         is non-empty (multi-tenant install with foreign installation)
+ *       - `installationId` is missing AND either routing table is non-empty
+ *         AND no `repository.full_name` match (PAT-mode webhook from a foreign
+ *         account — codex P0 #4 regression target)
+ *
+ * Escape hatch: `GITHUB_ALLOW_UNKNOWN_INSTALLATION_FALLBACK=1` restores the
+ * env fallback for emergency rollback only. Mirrors the Slack equivalent
+ * (`SLACK_ALLOW_UNKNOWN_TEAM_FALLBACK`).
+ *
+ * The fail-closed contract lives here so every caller (route handler, CLI
+ * replay, future MCP) gets identical protection.
+ */
+export declare function resolveTenantForGitHub(db: DatabaseSyncLike, args: ResolveArgs): string | null;
+//# sourceMappingURL=tenant-routing.d.ts.map

package/dist/connectors/github/tenant-routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-routing.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/tenant-routing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,WAAW;IAC1B,6GAA6G;IAC7G,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gGAAgG;IAChG,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,sBAAsB,CACpC,EAAE,EAAE,gBAAgB,EACpB,IAAI,EAAE,WAAW,GAChB,MAAM,GAAG,IAAI,CAsCf"}

package/dist/connectors/github/tenant-routing.js

@@ -0,0 +1,61 @@
+/**
+ * Resolve the tenant_id for a GitHub webhook envelope.
+ *
+ * Returns:
+ *   - mapped tenant_id when `github_installations` has a row for `installationId`
+ *     (App-mode multi-tenant — primary path)
+ *   - mapped tenant_id when `installation` is absent, `repository.full_name`
+ *     matches a `github_repositories` row (PAT-mode multi-tenant)
+ *   - the deployment's HIPPO_TENANT fallback (or 'default') when BOTH routing
+ *     tables are empty (single-tenant deployment — env fallback is safe)
+ *   - null when:
+ *       - `installationId` is present but unknown AND `github_installations`
+ *         is non-empty (multi-tenant install with foreign installation)
+ *       - `installationId` is missing AND either routing table is non-empty
+ *         AND no `repository.full_name` match (PAT-mode webhook from a foreign
+ *         account — codex P0 #4 regression target)
+ *
+ * Escape hatch: `GITHUB_ALLOW_UNKNOWN_INSTALLATION_FALLBACK=1` restores the
+ * env fallback for emergency rollback only. Mirrors the Slack equivalent
+ * (`SLACK_ALLOW_UNKNOWN_TEAM_FALLBACK`).
+ *
+ * The fail-closed contract lives here so every caller (route handler, CLI
+ * replay, future MCP) gets identical protection.
+ */
+export function resolveTenantForGitHub(db, args) {
+    const envFallback = () => process.env.HIPPO_TENANT?.trim() || 'default';
+    const escapeHatch = process.env.GITHUB_ALLOW_UNKNOWN_INSTALLATION_FALLBACK === '1';
+    const instCount = db
+        .prepare(`SELECT COUNT(*) AS c FROM github_installations`)
+        .get().c;
+    const repoCount = db
+        .prepare(`SELECT COUNT(*) AS c FROM github_repositories`)
+        .get().c;
+    if (args.installationId) {
+        const row = db
+            .prepare(`SELECT tenant_id FROM github_installations WHERE installation_id = ?`)
+            .get(args.installationId);
+        if (row?.tenant_id)
+            return row.tenant_id;
+        if (Number(instCount) === 0) {
+            // Single-tenant install (table empty); env fallback is safe.
+            return envFallback();
+        }
+        // Multi-tenant install with unknown installation_id — fail closed.
+        return escapeHatch ? envFallback() : null;
+    }
+    // No installation.id (PAT-mode webhook).
+    if (Number(instCount) === 0 && Number(repoCount) === 0) {
+        // Single-tenant deployment with no routing tables populated.
+        return envFallback();
+    }
+    if (args.repoFullName) {
+        const row = db
+            .prepare(`SELECT tenant_id FROM github_repositories WHERE repo_full_name = ? ORDER BY added_at, tenant_id LIMIT 1`)
+            .get(args.repoFullName);
+        if (row?.tenant_id)
+            return row.tenant_id;
+    }
+    return escapeHatch ? envFallback() : null;
+}
+//# sourceMappingURL=tenant-routing.js.map

package/dist/connectors/github/tenant-routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-routing.js","sourceRoot":"","sources":["../../../src/connectors/github/tenant-routing.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,sBAAsB,CACpC,EAAoB,EACpB,IAAiB;IAEjB,MAAM,WAAW,GAAG,GAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAChF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,0CAA0C,KAAK,GAAG,CAAC;IAEnF,MAAM,SAAS,GAAI,EAAE;SAClB,OAAO,CAAC,gDAAgD,CAAC;SACzD,GAAG,EAA6B,CAAC,CAAC,CAAC;IACtC,MAAM,SAAS,GAAI,EAAE;SAClB,OAAO,CAAC,+CAA+C,CAAC;SACxD,GAAG,EAA6B,CAAC,CAAC,CAAC;IAEtC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CAAC,sEAAsE,CAAC;aAC/E,GAAG,CAAC,IAAI,CAAC,cAAc,CAAuC,CAAC;QAClE,IAAI,GAAG,EAAE,SAAS;YAAE,OAAO,GAAG,CAAC,SAAS,CAAC;QACzC,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,6DAA6D;YAC7D,OAAO,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,mEAAmE;QACnE,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,yCAAyC;IACzC,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,6DAA6D;QAC7D,OAAO,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CACN,yGAAyG,CAC1G;aACA,GAAG,CAAC,IAAI,CAAC,YAAY,CAAuC,CAAC;QAChE,IAAI,GAAG,EAAE,SAAS;YAAE,OAAO,GAAG,CAAC,SAAS,CAAC;IAC3C,CAAC;IACD,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC"}

package/dist/connectors/github/transform.d.ts

@@ -0,0 +1,7 @@
+import type { RememberOpts } from '../../api.js';
+import type { GitHubIssueEvent, GitHubIssueCommentEvent, GitHubPullRequestEvent, GitHubPullRequestReviewCommentEvent } from './types.js';
+export declare function issueEventToRememberOpts(evt: GitHubIssueEvent): RememberOpts | null;
+export declare function issueCommentEventToRememberOpts(evt: GitHubIssueCommentEvent): RememberOpts | null;
+export declare function pullRequestEventToRememberOpts(evt: GitHubPullRequestEvent): RememberOpts | null;
+export declare function prReviewCommentEventToRememberOpts(evt: GitHubPullRequestReviewCommentEvent): RememberOpts | null;
+//# sourceMappingURL=transform.d.ts.map

package/dist/connectors/github/transform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/transform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,KAAK,EACV,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,mCAAmC,EACpC,MAAM,YAAY,CAAC;AAqBpB,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,gBAAgB,GACpB,YAAY,GAAG,IAAI,CAoBrB;AAED,wBAAgB,+BAA+B,CAC7C,GAAG,EAAE,uBAAuB,GAC3B,YAAY,GAAG,IAAI,CAkBrB;AAED,wBAAgB,8BAA8B,CAC5C,GAAG,EAAE,sBAAsB,GAC1B,YAAY,GAAG,IAAI,CAoBrB;AAED,wBAAgB,kCAAkC,CAChD,GAAG,EAAE,mCAAmC,GACvC,YAAY,GAAG,IAAI,CAkBrB"}

package/dist/connectors/github/transform.js

@@ -0,0 +1,103 @@
+import { scopeFromRepository } from './scope.js';
+/**
+ * Convert GitHub webhook events into RememberOpts for api.remember(). Each
+ * function returns null when the event has no usable body so the webhook
+ * caller can mark the delivery seen for idempotency and skip the insert.
+ *
+ * Contract (mirrors src/connectors/slack/transform.ts):
+ * - kind is the literal 'raw' (E1.x connector boundary, see src/importers.ts).
+ * - artifact_ref formats are stable; deletion paths look up by these strings.
+ *   - issue:               github://<owner/repo>/issue/<number>
+ *   - issue_comment:       github://<owner/repo>/issue/<number>/comment/<id>
+ *   - pull_request:        github://<owner/repo>/pull/<number>
+ *   - pr_review_comment:   github://<owner/repo>/pull/<number>/review_comment/<id>
+ * - owner is `user:github:<login>`. Required by the v0.40.0 provenance gate.
+ * - scope is derived from repository.private via scopeFromRepository (default
+ *   private when undetermined).
+ */
+const UNKNOWN_REPO = 'unknown/unknown';
+export function issueEventToRememberOpts(evt) {
+    const body = evt.issue.body?.trim();
+    const title = evt.issue.title?.trim();
+    const text = [title, body].filter(Boolean).join('\n\n');
+    if (!text)
+        return null;
+    const repoFull = evt.repository?.full_name ?? UNKNOWN_REPO;
+    const login = evt.issue.user.login;
+    return {
+        content: text,
+        kind: 'raw',
+        scope: scopeFromRepository(evt.repository),
+        artifactRef: `github://${repoFull}/issue/${evt.issue.number}`,
+        owner: `user:github:${login}`,
+        tags: [
+            'source:github',
+            `repo:${repoFull}`,
+            `event:issues.${evt.action}`,
+            `user:github:${login}`,
+        ],
+    };
+}
+export function issueCommentEventToRememberOpts(evt) {
+    const text = evt.comment.body?.trim();
+    if (!text)
+        return null;
+    const repoFull = evt.repository?.full_name ?? UNKNOWN_REPO;
+    const login = evt.comment.user.login;
+    return {
+        content: text,
+        kind: 'raw',
+        scope: scopeFromRepository(evt.repository),
+        artifactRef: `github://${repoFull}/issue/${evt.issue.number}/comment/${evt.comment.id}`,
+        owner: `user:github:${login}`,
+        tags: [
+            'source:github',
+            `repo:${repoFull}`,
+            `event:issue_comment.${evt.action}`,
+            `user:github:${login}`,
+        ],
+    };
+}
+export function pullRequestEventToRememberOpts(evt) {
+    const body = evt.pull_request.body?.trim();
+    const title = evt.pull_request.title?.trim();
+    const text = [title, body].filter(Boolean).join('\n\n');
+    if (!text)
+        return null;
+    const repoFull = evt.repository?.full_name ?? UNKNOWN_REPO;
+    const login = evt.pull_request.user.login;
+    return {
+        content: text,
+        kind: 'raw',
+        scope: scopeFromRepository(evt.repository),
+        artifactRef: `github://${repoFull}/pull/${evt.pull_request.number}`,
+        owner: `user:github:${login}`,
+        tags: [
+            'source:github',
+            `repo:${repoFull}`,
+            `event:pull_request.${evt.action}`,
+            `user:github:${login}`,
+        ],
+    };
+}
+export function prReviewCommentEventToRememberOpts(evt) {
+    const text = evt.comment.body?.trim();
+    if (!text)
+        return null;
+    const repoFull = evt.repository?.full_name ?? UNKNOWN_REPO;
+    const login = evt.comment.user.login;
+    return {
+        content: text,
+        kind: 'raw',
+        scope: scopeFromRepository(evt.repository),
+        artifactRef: `github://${repoFull}/pull/${evt.pull_request.number}/review_comment/${evt.comment.id}`,
+        owner: `user:github:${login}`,
+        tags: [
+            'source:github',
+            `repo:${repoFull}`,
+            `event:pull_request_review_comment.${evt.action}`,
+            `user:github:${login}`,
+        ],
+    };
+}
+//# sourceMappingURL=transform.js.map

package/dist/connectors/github/transform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform.js","sourceRoot":"","sources":["../../../src/connectors/github/transform.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAQjD;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAEvC,MAAM,UAAU,wBAAwB,CACtC,GAAqB;IAErB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,YAAY,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;IACnC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,WAAW,EAAE,YAAY,QAAQ,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE;QAC7D,KAAK,EAAE,eAAe,KAAK,EAAE;QAC7B,IAAI,EAAE;YACJ,eAAe;YACf,QAAQ,QAAQ,EAAE;YAClB,gBAAgB,GAAG,CAAC,MAAM,EAAE;YAC5B,eAAe,KAAK,EAAE;SACvB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,GAA4B;IAE5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,YAAY,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;IACrC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,WAAW,EAAE,YAAY,QAAQ,UAAU,GAAG,CAAC,KAAK,CAAC,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;QACvF,KAAK,EAAE,eAAe,KAAK,EAAE;QAC7B,IAAI,EAAE;YACJ,eAAe;YACf,QAAQ,QAAQ,EAAE;YAClB,uBAAuB,GAAG,CAAC,MAAM,EAAE;YACnC,eAAe,KAAK,EAAE;SACvB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,GAA2B;IAE3B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,YAAY,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,WAAW,EAAE,YAAY,QAAQ,SAAS,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE;QACnE,KAAK,EAAE,eAAe,KAAK,EAAE;QAC7B,IAAI,EAAE;YACJ,eAAe;YACf,QAAQ,QAAQ,EAAE;YAClB,sBAAsB,GAAG,CAAC,MAAM,EAAE;YAClC,eAAe,KAAK,EAAE;SACvB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,GAAwC;IAExC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,IAAI,YAAY,CAAC;IAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;IACrC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;QAC1C,WAAW,EAAE,YAAY,QAAQ,SAAS,GAAG,CAAC,YAAY,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;QACpG,KAAK,EAAE,eAAe,KAAK,EAAE;QAC7B,IAAI,EAAE;YACJ,eAAe;YACf,QAAQ,QAAQ,EAAE;YAClB,qCAAqC,GAAG,CAAC,MAAM,EAAE;YACjD,eAAe,KAAK,EAAE;SACvB;KACF,CAAC;AACJ,CAAC"}