managed-deepagents 0.5.0-dev.88 → 0.5.0-dev.90

package/dist/connectors/github/index.js

@@ -1,192 +0,0 @@
-/**
- * GitHub connector — workspace tools, sandbox checkout, and optional webhooks.
- *
- * A [tool server integration](../toolserver) like `connectors.gmail`, so the
- * workspace's GitHub tools — issues, pull requests, reviews — come from the same
- * gateway against the same credential. GitHub reaches further than an API
- * though: an agent works on a repository by having it checked out. So this
- * connector also provisions the sandbox, declaring which repositories to clone,
- * whether to install the GitHub CLI, and whether resolved identity credentials
- * should be available inside the sandbox so the agent can act as the user.
- *
- * Optional `events` merges former `channels.github` authoring: GitHub App
- * webhook ingress at `POST /connectors/{name}/events`, messaging transport, and
- * deploy requirements. Connect-with-GitHub OAuth remains `connect.github`.
- *
- * The two halves interact in one place: installing the CLI (the default) leaves
- * the integration's tools off, because `gh` already reaches the same API. Naming
- * tools, or dropping the CLI, turns them on. See {@link defaultToolsFromCLI}.
- */
-import { z } from "zod";
-import { GITHUB_CHANNEL_REQUIRED_ENV, toGitHubChannelManifest, } from "./define.js";
-import { handleGitHubEventsRequest } from "./http.js";
-import { transportFromEnv } from "./transport.js";
-import { CONNECTOR_BRAND, } from "../../runtime/connector.js";
-import { GITHUB_SLUG, toolServerConnectorSchema, toolServerTools, } from "../toolserver/index.js";
-import { provisionGitHubSandbox } from "./sandbox.js";
-export { provisionGitHubSandbox, buildGitHubProvisionScript, CLONE_FAILED_MARKDOWN, isBenignCheckoutFailure, GITHUB_TOKEN_REMOTE_PATH, GITHUB_PROVISION_REMOTE_PATH, } from "./sandbox.js";
-export { GITHUB_CHANNEL_REQUIRED_ENV, requiredGitHubPermissions, toGitHubChannelManifest, } from "./define.js";
-/** Sandbox-relative paths may not escape the workspace or be absolute. */
-const relativePath = (message) => z.string(message).refine(isSafeRelativePath, message);
-const repositoryCheckout = z
-    .object({
-    repo: z
-        .string()
-        .refine(isExactRepo, 'repo must look like "owner/repo"')
-        .optional(),
-    from: z.literal("event.repository").optional(),
-    path: relativePath("path must be a safe relative sandbox path"),
-    ref: z.string().optional(),
-    depth: z.int("depth must be >= 1").min(1, "depth must be >= 1").optional(),
-    sparsePaths: z
-        .array(relativePath("sparsePaths must be safe relative paths"))
-        .optional(),
-    submodules: z.boolean().optional(),
-    write: z.boolean().optional(),
-    onReuse: z
-        .enum(["keep", "reset", "fetch"], {
-        error: 'onReuse must be "keep", "reset", or "fetch"',
-    })
-        .optional(),
-})
-    .refine((repo) => repo.repo !== undefined || repo.from === "event.repository", 'requires `repo` or from: "event.repository"');
-const githubEventHandler = z.object({
-    on: z
-        .string('on must be a non-empty string (e.g. "pull_request", "pull_request.opened", or "*")')
-        .trim()
-        .min(1, 'on must be a non-empty string (e.g. "pull_request", "pull_request.opened", or "*")'),
-    repositories: z.array(z.string()).optional(),
-    autoReply: z.boolean().default(true),
-    prompt: z.custom((prompt) => typeof prompt === "function", "requires a `prompt` function"),
-});
-/**
- * The GitHub connector's arguments: the gateway options, plus the sandbox ones.
- *
- * Checkout paths are the security-relevant part: they land in the sandbox, so
- * each one must stay inside the workspace and no two may collide.
- */
-const githubConnectorConfig = toolServerConnectorSchema({
-    repositories: z
-        .array(repositoryCheckout)
-        .check((ctx) => {
-        const seen = new Set();
-        for (const repo of ctx.value) {
-            if (seen.has(repo.path)) {
-                ctx.issues.push({
-                    code: "custom",
-                    input: ctx.value,
-                    message: `duplicate repository checkout path "${repo.path}"`,
-                });
-            }
-            seen.add(repo.path);
-        }
-    })
-        .prefault([]),
-    installCLI: z.boolean().default(true),
-    injectCredentials: z.boolean().default(true),
-    events: z
-        .array(githubEventHandler)
-        .nonempty("requires a non-empty `events` array")
-        .optional(),
-}).transform(defaultToolsFromCLI);
-const githubTools = toolServerTools(GITHUB_SLUG, "connectors.github");
-function hide(target, key, value) {
-    Object.defineProperty(target, key, { value, enumerable: false });
-}
-/**
- * Leave the integration's tools off when the sandbox has `gh`.
- *
- * The CLI and the tools are two routes to the same API, and an agent that can run
- * `gh` does not need the integration's tool definitions in its prompt to reach the
- * same endpoints. So the CLI — installed by default — implies no tools, and a
- * project gets them by naming them or by dropping the CLI.
- *
- * Any explicit selection wins, including `excludeTools` on its own: asking for a
- * tool is asking for it, whatever else is in the sandbox.
- */
-function defaultToolsFromCLI(args) {
-    const selected = args.includeTools !== undefined || args.excludeTools !== undefined;
-    if (selected || !args.installCLI) {
-        return args;
-    }
-    return { ...args, includeTools: [] };
-}
-/**
- * Build the branded GitHub connector declaration.
- *
- * Sandbox + tools follow today's defaults. When {@link GitHubConnectorConfig.events}
- * is set, Events / messaging / requirements hooks are attached as well.
- *
- * At least one of repositories, tool selection (`includeTools` /
- * `excludeTools`), or `events` gives the connector a purpose beyond default
- * sandbox provisioning — but an empty config remains valid (sandbox-only).
- */
-export function githubConnector(config) {
-    const validate = githubConnectorConfig["~standard"].validate;
-    const result = validate(config);
-    if (result instanceof Promise) {
-        throw new TypeError("connectors.github(...) needs a schema that validates synchronously");
-    }
-    if (result.issues) {
-        const message = result.issues.map((issue) => issue.message).join("; ");
-        throw new Error(`connectors.github(...) ${message}`);
-    }
-    const args = result.value;
-    // `events` is authoring-only: the Connector.events hook owns that property.
-    const { events: eventHandlers, ...rest } = args;
-    const self = { kind: "github", ...rest };
-    hide(self, CONNECTOR_BRAND, true);
-    hide(self, "tools", (ctx) => githubTools(ctx, self));
-    hide(self, "sandbox", async (ctx) => {
-        await provisionGitHubSandbox(ctx.backend, self, {
-            mode: ctx.mode,
-            config: ctx.config,
-            identity: ctx.identity,
-        });
-    });
-    if (eventHandlers !== undefined && eventHandlers.length > 0) {
-        const webhookConfig = {
-            events: eventHandlers,
-        };
-        hide(self, "events", (ctx) => handleGitHubEventsRequest(ctx.request, {
-            name: ctx.name,
-            config: webhookConfig,
-            definition: { config: webhookConfig },
-            rawBody: ctx.rawBody,
-        }));
-        hide(self, "messaging", (env) => transportFromEnv(env));
-        hide(self, "requirements", (name) => toGitHubRequirements(name, webhookConfig));
-    }
-    return self;
-}
-/** Build deploy/runtime requirements for a file-derived connector name. */
-export function toGitHubRequirements(name, config) {
-    return {
-        name,
-        provider: "github",
-        ...toGitHubChannelManifest(config),
-        requiredEnv: [...GITHUB_CHANNEL_REQUIRED_ENV],
-    };
-}
-function isExactRepo(pattern) {
-    const [owner, repo, extra] = pattern.split("/");
-    if (!owner || !repo || extra !== undefined)
-        return false;
-    return isSlug(owner) && isSlug(repo);
-}
-function isSlug(value) {
-    return /^[A-Za-z0-9_.-]+$/.test(value);
-}
-function isSafeRelativePath(path) {
-    if (path.length === 0 || path.startsWith("/") || path.includes("\0")) {
-        return false;
-    }
-    return !path.split("/").some((part) => part === "..");
-}
-export { githubTriggerMatches, matchGitHubHandler } from "./match.js";
-export { verifyGitHubWebhookSignature, normalizeGitHubEvent, extractIssueOrPullNumber, GITHUB_WEBHOOK_SECRET_ENV, } from "./normalize.js";
-export { createGitHubAppTransport, transportFromEnv, GITHUB_APP_ID_ENV, GITHUB_APP_PRIVATE_KEY_ENV, GITHUB_INSTALLATION_ID_ENV, } from "./transport.js";
-export { encodeGitHubSourceThreadKey, decodeGitHubSourceThreadKey, } from "./source-thread.js";
-export { handleGitHubEventsRequest } from "./http.js";
-export { githubChannelAdapter, githubConfigFromManifest, } from "./adapter-core.js";
-//# sourceMappingURL=index.js.map

package/dist/connectors/github/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/connectors/github/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,GAIxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EACL,eAAe,GAKhB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,WAAW,EACX,yBAAyB,EACzB,eAAe,GAGhB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EACL,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,cAAc,CAAC;AAetB,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AAwFrB,0EAA0E;AAC1E,MAAM,YAAY,GAAG,CAAC,OAAe,EAAE,EAAE,CACvC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AAExD,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,MAAM,CAAC,WAAW,EAAE,kCAAkC,CAAC;SACvD,QAAQ,EAAE;IACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IAC9C,IAAI,EAAE,YAAY,CAAC,2CAA2C,CAAC;IAC/D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC1E,WAAW,EAAE,CAAC;SACX,KAAK,CAAC,YAAY,CAAC,yCAAyC,CAAC,CAAC;SAC9D,QAAQ,EAAE;IACb,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC;SACP,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;QAChC,KAAK,EAAE,6CAA6C;KACrD,CAAC;SACD,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EACrE,6CAA6C,CAC9C,CAAC;AAEJ,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,EAAE,EAAE,CAAC;SACF,MAAM,CACL,oFAAoF,CACrF;SACA,IAAI,EAAE;SACN,GAAG,CACF,CAAC,EACD,oFAAoF,CACrF;IACH,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,UAAU,EACxC,8BAA8B,CAC/B;CACF,CAAC,CAAC;AAaH;;;;;GAKG;AACH,MAAM,qBAAqB,GAGvB,yBAAyB,CAG3B;IACA,YAAY,EAAE,CAAC;SACZ,KAAK,CAAC,kBAAkB,CAAC;SACzB,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACb,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,QAAQ;oBACd,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,OAAO,EAAE,uCAAuC,IAAI,CAAC,IAAI,GAAG;iBAC7D,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;SACD,QAAQ,CAAC,EAAE,CAAC;IACf,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACrC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5C,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,kBAAkB,CAAC;SACzB,QAAQ,CAAC,qCAAqC,CAAC;SAC/C,QAAQ,EAAE;CACd,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAU,CAAC;AAE3C,MAAM,WAAW,GAAG,eAAe,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;AAEtE,SAAS,IAAI,CAAC,MAAc,EAAE,GAAoB,EAAE,KAAc;IAChE,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,mBAAmB,CAAC,IAAyB;IACpD,MAAM,QAAQ,GACZ,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC;IACrE,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,MAA8B;IAE9B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;IAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CACjB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;IAC1B,4EAA4E;IAC5E,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAChD,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,QAAiB,EAAE,GAAG,IAAI,EAAqB,CAAC;IACrE,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IAElC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAgB,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAClE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAmB,EAAE,EAAE;QAClD,MAAM,sBAAsB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE;YAC9C,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,aAAa,GAAgC;YACjD,MAAM,EAAE,aAAa;SACtB,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAkB,EAAE,EAAE,CAC1C,yBAAyB,CAAC,GAAG,CAAC,OAAO,EAAE;YACrC,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,aAAa;YACrB,UAAU,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;YACrC,OAAO,EAAE,GAAG,CAAC,OAAO;SACrB,CAAC,CACH,CAAC;QACF,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,GAAsB,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,IAAY,EAAE,EAAE,CAC1C,oBAAoB,CAAC,IAAI,EAAE,aAAa,CAAC,CAC1C,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,MAAmC;IAEnC,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,QAAQ;QAClB,GAAG,uBAAuB,CAAC,MAAM,CAAC;QAClC,WAAW,EAAE,CAAC,GAAG,2BAA2B,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EACL,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC"}

package/dist/connectors/github/match.d.ts

@@ -1,20 +0,0 @@
-/**
- * Pure GitHub handler routing — kept out of `define.ts` so normalize/http can
- * load without pulling the channel authoring module (and its adapter) back in.
- */
-import type { RequiredGitHubChannelConfig, RequiredGitHubChannelHandler } from "./define.js";
-/**
- * Whether a handler `on` filter matches a delivery.
- *
- * @param on - `"*"`, `"pull_request"`, or `"pull_request.opened"`
- * @param eventName - `X-GitHub-Event`
- * @param action - `payload.action` when present
- */
-export declare function githubTriggerMatches(on: string, eventName: string, action?: string): boolean;
-/**
- * Find the first handler that matches event/action + repository.
- *
- * @returns The handler, or `undefined` when no handler matches (event ignored).
- */
-export declare function matchGitHubHandler(config: RequiredGitHubChannelConfig, eventName: string, repository: string | undefined, action?: string): RequiredGitHubChannelHandler | undefined;
-//# sourceMappingURL=match.d.ts.map

package/dist/connectors/github/match.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"match.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/match.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EACV,2BAA2B,EAC3B,4BAA4B,EAC7B,MAAM,aAAa,CAAC;AAErB;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,MAAM,EACV,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAMT;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,2BAA2B,EACnC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,MAAM,CAAC,EAAE,MAAM,GACd,4BAA4B,GAAG,SAAS,CAU1C"}

package/dist/connectors/github/match.js

@@ -1,41 +0,0 @@
-/**
- * Pure GitHub handler routing — kept out of `define.ts` so normalize/http can
- * load without pulling the channel authoring module (and its adapter) back in.
- */
-/**
- * Whether a handler `on` filter matches a delivery.
- *
- * @param on - `"*"`, `"pull_request"`, or `"pull_request.opened"`
- * @param eventName - `X-GitHub-Event`
- * @param action - `payload.action` when present
- */
-export function githubTriggerMatches(on, eventName, action) {
-    if (!on || !eventName)
-        return false;
-    if (on === "*")
-        return true;
-    if (on === eventName)
-        return true;
-    if (action !== undefined && on === `${eventName}.${action}`)
-        return true;
-    return false;
-}
-/**
- * Find the first handler that matches event/action + repository.
- *
- * @returns The handler, or `undefined` when no handler matches (event ignored).
- */
-export function matchGitHubHandler(config, eventName, repository, action) {
-    for (const handler of config.events) {
-        if (!githubTriggerMatches(handler.on, eventName, action))
-            continue;
-        const repos = handler.repositories;
-        if (repos && repos.length > 0) {
-            if (!repository || !repos.includes(repository))
-                continue;
-        }
-        return handler;
-    }
-    return undefined;
-}
-//# sourceMappingURL=match.js.map

package/dist/connectors/github/match.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"match.js","sourceRoot":"","sources":["../../../src/connectors/github/match.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,EAAU,EACV,SAAiB,EACjB,MAAe;IAEf,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,IAAI,EAAE,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC5B,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,MAAM,KAAK,SAAS,IAAI,EAAE,KAAK,GAAG,SAAS,IAAI,MAAM,EAAE;QAAE,OAAO,IAAI,CAAC;IACzE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAmC,EACnC,SAAiB,EACjB,UAA8B,EAC9B,MAAe;IAEf,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC;YAAE,SAAS;QACnE,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC;QACnC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAAE,SAAS;QAC3D,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/connectors/github/normalize.d.ts

@@ -1,32 +0,0 @@
-/**
- * GitHub App webhook verify + normalize into {@link ChannelEvent}.
- */
-import type { ChannelEvent } from "../../channels/types.js";
-import type { GitHubWebhookPromptEvent, RequiredGitHubChannelConfig, RequiredGitHubChannelHandler } from "./define.js";
-export declare const GITHUB_WEBHOOK_SECRET_ENV = "GITHUB_WEBHOOK_SECRET";
-export interface GitHubNormalizeResult {
-    event: ChannelEvent;
-    sourceThreadKey: string;
-    trigger: string;
-    ignored?: boolean;
-    /** Matched handler when the event is accepted (live `prompt` included). */
-    handler?: RequiredGitHubChannelHandler;
-    /** Envelope passed to {@link RequiredGitHubChannelHandler.prompt}. */
-    promptEvent?: GitHubWebhookPromptEvent;
-}
-/**
- * Verify `X-Hub-Signature-256` against the raw body before parsing JSON.
- */
-export declare function verifyGitHubWebhookSignature(rawBody: string | Uint8Array, signatureHeader: string, secret: string): void;
-/**
- * Normalize a verified GitHub webhook payload into a {@link ChannelEvent}.
- *
- * Accepts any `X-GitHub-Event`. Returns `ignored: true` when no handler matches.
- */
-export declare function normalizeGitHubEvent(body: unknown, headers: {
-    eventName: string;
-    deliveryId: string;
-}, config: RequiredGitHubChannelConfig, installationIdFallback?: string): GitHubNormalizeResult;
-/** Best-effort issue/PR number from common webhook payload shapes. */
-export declare function extractIssueOrPullNumber(payload: Record<string, unknown>): number | undefined;
-//# sourceMappingURL=normalize.d.ts.map

package/dist/connectors/github/normalize.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/normalize.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EACV,wBAAwB,EACxB,2BAA2B,EAC3B,4BAA4B,EAC7B,MAAM,aAAa,CAAC;AAIrB,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AAEjE,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,YAAY,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,4BAA4B,CAAC;IACvC,sEAAsE;IACtE,WAAW,CAAC,EAAE,wBAAwB,CAAC;CACxC;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,GACb,IAAI,CA0BN;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,OAAO,EACb,OAAO,EAAE;IACP,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,EACD,MAAM,EAAE,2BAA2B,EACnC,sBAAsB,CAAC,EAAE,MAAM,GAC9B,qBAAqB,CAgGvB;AAED,sEAAsE;AACtE,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,MAAM,GAAG,SAAS,CAMpB"}

package/dist/connectors/github/normalize.js

@@ -1,152 +0,0 @@
-/**
- * GitHub App webhook verify + normalize into {@link ChannelEvent}.
- */
-import { createHmac, timingSafeEqual } from "node:crypto";
-import { randomUUID } from "node:crypto";
-import { ChannelError } from "../../channels/errors.js";
-import { matchGitHubHandler } from "./match.js";
-import { encodeGitHubSourceThreadKey } from "./source-thread.js";
-export const GITHUB_WEBHOOK_SECRET_ENV = "GITHUB_WEBHOOK_SECRET";
-/**
- * Verify `X-Hub-Signature-256` against the raw body before parsing JSON.
- */
-export function verifyGitHubWebhookSignature(rawBody, signatureHeader, secret) {
-    if (!secret) {
-        throw new ChannelError("channel_provider_rejected", "GitHub webhook secret is not configured");
-    }
-    const expectedPrefix = "sha256=";
-    if (!signatureHeader.startsWith(expectedPrefix)) {
-        throw new ChannelError("channel_invalid_signature", "missing or invalid X-Hub-Signature-256");
-    }
-    const body = typeof rawBody === "string" ? Buffer.from(rawBody) : Buffer.from(rawBody);
-    const digest = createHmac("sha256", secret).update(body).digest("hex");
-    const provided = signatureHeader.slice(expectedPrefix.length);
-    const a = Buffer.from(digest, "utf8");
-    const b = Buffer.from(provided, "utf8");
-    if (a.length !== b.length || !timingSafeEqual(a, b)) {
-        throw new ChannelError("channel_invalid_signature", "GitHub webhook signature mismatch");
-    }
-}
-/**
- * Normalize a verified GitHub webhook payload into a {@link ChannelEvent}.
- *
- * Accepts any `X-GitHub-Event`. Returns `ignored: true` when no handler matches.
- */
-export function normalizeGitHubEvent(body, headers, config, installationIdFallback) {
-    if (!headers.eventName) {
-        return ignoredResult(headers.deliveryId);
-    }
-    const payload = asObject(body);
-    const action = stringField(payload.action);
-    const installationId = stringField(asObject(payload.installation)?.id) ??
-        (numberField(asObject(payload.installation)?.id) !== undefined
-            ? String(numberField(asObject(payload.installation)?.id))
-            : undefined) ??
-        installationIdFallback ??
-        undefined;
-    const repository = asObject(payload.repository);
-    const ownerLogin = stringField(asObject(repository.owner)?.login) ??
-        stringField(repository.full_name)?.split("/")[0] ??
-        undefined;
-    const repoName = stringField(repository.name) ??
-        stringField(repository.full_name)?.split("/")[1] ??
-        undefined;
-    const fullName = stringField(repository.full_name) ??
-        (ownerLogin && repoName ? `${ownerLogin}/${repoName}` : undefined);
-    const handler = matchGitHubHandler(config, headers.eventName, fullName, action);
-    if (!handler) {
-        return ignoredResult(headers.deliveryId);
-    }
-    const issueOrPullNumber = extractIssueOrPullNumber(payload);
-    const trigger = action !== undefined ? `${headers.eventName}.${action}` : headers.eventName;
-    const promptEvent = {
-        eventName: headers.eventName,
-        ...(action !== undefined ? { action } : {}),
-        trigger,
-        deliveryId: headers.deliveryId,
-        ...(fullName !== undefined ? { repository: fullName } : {}),
-        ...(installationId !== undefined ? { installationId } : {}),
-        ...(issueOrPullNumber !== undefined ? { issueOrPullNumber } : {}),
-        payload: body,
-    };
-    const text = handler.prompt(promptEvent);
-    const conversationId = ownerLogin && repoName && issueOrPullNumber !== undefined
-        ? `${ownerLogin}/${repoName}#${issueOrPullNumber}`
-        : (fullName ?? headers.deliveryId);
-    const sourceThreadKey = encodeGitHubSourceThreadKey({
-        installationId: installationId ?? "unknown",
-        owner: ownerLogin,
-        repo: repoName,
-        number: issueOrPullNumber,
-        deliveryId: headers.deliveryId,
-    });
-    return {
-        trigger,
-        sourceThreadKey,
-        handler,
-        promptEvent,
-        event: {
-            deliveryId: randomUUID(),
-            eventId: headers.deliveryId,
-            type: trigger,
-            address: {
-                conversationId,
-                ...(issueOrPullNumber !== undefined
-                    ? { threadId: conversationId }
-                    : {}),
-            },
-            message: { id: headers.deliveryId, text, attachments: [] },
-            native: {
-                provider: "github",
-                payload: {
-                    eventName: headers.eventName,
-                    ...(action !== undefined ? { action } : {}),
-                    ...(fullName !== undefined ? { repository: fullName } : {}),
-                    ...(installationId !== undefined
-                        ? { installation: { id: installationId } }
-                        : {}),
-                },
-            },
-        },
-    };
-}
-/** Best-effort issue/PR number from common webhook payload shapes. */
-export function extractIssueOrPullNumber(payload) {
-    const pr = numberField(asObject(payload.pull_request).number);
-    if (pr !== undefined)
-        return pr;
-    const issue = numberField(asObject(payload.issue).number);
-    if (issue !== undefined)
-        return issue;
-    return numberField(payload.number);
-}
-function ignoredResult(deliveryHeader) {
-    return {
-        ignored: true,
-        trigger: "ignored",
-        sourceThreadKey: "",
-        event: {
-            deliveryId: randomUUID(),
-            eventId: deliveryHeader,
-            type: "ignored",
-            address: { conversationId: "" },
-        },
-    };
-}
-function asObject(value) {
-    return typeof value === "object" && value !== null
-        ? value
-        : {};
-}
-function stringField(value) {
-    if (typeof value === "number" && Number.isFinite(value)) {
-        return String(value);
-    }
-    return typeof value === "string" && value.trim() ? value.trim() : undefined;
-}
-function numberField(value) {
-    return typeof value === "number" && Number.isFinite(value)
-        ? value
-        : undefined;
-}
-//# sourceMappingURL=normalize.js.map

package/dist/connectors/github/normalize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../../../src/connectors/github/normalize.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAOxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAEjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAajE;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAA4B,EAC5B,eAAuB,EACvB,MAAc;IAEd,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,YAAY,CACpB,2BAA2B,EAC3B,yCAAyC,CAC1C,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,SAAS,CAAC;IACjC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,YAAY,CACpB,2BAA2B,EAC3B,wCAAwC,CACzC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GACR,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,YAAY,CACpB,2BAA2B,EAC3B,mCAAmC,CACpC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAa,EACb,OAGC,EACD,MAAmC,EACnC,sBAA+B;IAE/B,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,cAAc,GAClB,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;QAC/C,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,SAAS;YAC5D,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;YACzD,CAAC,CAAC,SAAS,CAAC;QACd,sBAAsB;QACtB,SAAS,CAAC;IAEZ,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,UAAU,GACd,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;QAC9C,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChD,SAAS,CAAC;IACZ,MAAM,QAAQ,GACZ,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC;QAC5B,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChD,SAAS,CAAC;IACZ,MAAM,QAAQ,GACZ,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC;QACjC,CAAC,UAAU,IAAI,QAAQ,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAErE,MAAM,OAAO,GAAG,kBAAkB,CAChC,MAAM,EACN,OAAO,CAAC,SAAS,EACjB,QAAQ,EACR,MAAM,CACP,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,OAAO,GACX,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAE9E,MAAM,WAAW,GAA6B;QAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,IAAI;KACd,CAAC;IAEF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,cAAc,GAClB,UAAU,IAAI,QAAQ,IAAI,iBAAiB,KAAK,SAAS;QACvD,CAAC,CAAC,GAAG,UAAU,IAAI,QAAQ,IAAI,iBAAiB,EAAE;QAClD,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAEvC,MAAM,eAAe,GAAG,2BAA2B,CAAC;QAClD,cAAc,EAAE,cAAc,IAAI,SAAS;QAC3C,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,iBAAiB;QACzB,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IAEH,OAAO;QACL,OAAO;QACP,eAAe;QACf,OAAO;QACP,WAAW;QACX,KAAK,EAAE;YACL,UAAU,EAAE,UAAU,EAAE;YACxB,OAAO,EAAE,OAAO,CAAC,UAAU;YAC3B,IAAI,EAAE,OAAO;YACb,OAAO,EAAE;gBACP,cAAc;gBACd,GAAG,CAAC,iBAAiB,KAAK,SAAS;oBACjC,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE;oBAC9B,CAAC,CAAC,EAAE,CAAC;aACR;YACD,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;YAC1D,MAAM,EAAE;gBACN,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE;oBACP,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3D,GAAG,CAAC,cAAc,KAAK,SAAS;wBAC9B,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE;wBAC1C,CAAC,CAAC,EAAE,CAAC;iBACR;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,wBAAwB,CACtC,OAAgC;IAEhC,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,aAAa,CAAC,cAAsB;IAC3C,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,SAAS;QAClB,eAAe,EAAE,EAAE;QACnB,KAAK,EAAE;YACL,UAAU,EAAE,UAAU,EAAE;YACxB,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE;SAChC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAChD,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/connectors/github/sandbox.d.ts

@@ -1,54 +0,0 @@
-/**
- * Provision GitHub connector state inside a managed sandbox.
- *
- * On first create: optionally install `gh`, inject credentials, and clone
- * declared repositories. When a thread starts against a reused sandbox, refresh
- * credentials and apply each checkout's `onReuse` policy (default `fetch`).
- */
-import type { SandboxBackendProtocolV2 } from "deepagents";
-import type { GitHubConnector } from "./index.js";
-import type { IdentityDefinition } from "../../identity/index.js";
-import type { ManagedRunConfig } from "../../runtime/types.js";
-/** Absolute paths used for GitHub provisioning artifacts inside the sandbox. */
-export declare const GITHUB_TOKEN_REMOTE_PATH = "/tmp/mda-gh-token";
-export declare const GITHUB_PROVISION_REMOTE_PATH = "/tmp/mda-github-provision.sh";
-/** Backend surface required for GitHub sandbox provisioning. */
-export type GitHubSandboxBackend = Pick<SandboxBackendProtocolV2, "execute"> & Partial<Pick<SandboxBackendProtocolV2, "uploadFiles">>;
-/** Options for {@link provisionGitHubSandbox}. */
-export interface ProvisionGitHubSandboxOptions {
-    /**
-     * `"create"` installs/clones; `"reuse"` refreshes credentials + onReuse;
-     * `"credentials"` only re-injects the token / gh wrapper (same thread).
-     */
-    mode: "create" | "reuse" | "credentials";
-    /** Per-run LangGraph config (identity + thread scoping). */
-    config?: ManagedRunConfig;
-    /** Root identity declaration, when the project opts into managed identity. */
-    identity?: IdentityDefinition;
-}
-/**
- * Apply GitHub connector provisioning to a sandbox backend.
- *
- * Safe to call repeatedly: create installs/clones once; reuse refreshes
- * credentials and pulls declared refs when a thread starts.
- */
-export declare function provisionGitHubSandbox(backend: GitHubSandboxBackend, connector: GitHubConnector, options: ProvisionGitHubSandboxOptions): Promise<void>;
-/** Build the shell script that installs `gh`, wires credentials, and syncs repos. */
-export declare function buildGitHubProvisionScript(connector: GitHubConnector, options: {
-    mode: "create" | "reuse" | "credentials";
-    hasToken: boolean;
-}): string;
-/** Resolve a GitHub token for sandbox injection (actor → read → env). */
-export declare function resolveSandboxGitHubToken(connector: GitHubConnector, options: Pick<ProvisionGitHubSandboxOptions, "config" | "identity">): Promise<string | undefined>;
-/** Marker file written when a static checkout cannot be cloned. */
-export declare const CLONE_FAILED_MARKDOWN = "CLONE_FAILED.md";
-/**
- * Resolve an authoring-relative checkout path to the absolute sandbox location.
- *
- * Authoring forbids absolute paths; deepagents filesystem tools require them.
- * `workspace/...` maps to `/workspace/...` to match fixture/setup conventions.
- */
-export declare function absoluteCheckoutPath(relativePath: string): string;
-/** True when provision failed for a recoverable git checkout reason. */
-export declare function isBenignCheckoutFailure(output: string): boolean;
-//# sourceMappingURL=sandbox.d.ts.map

package/dist/connectors/github/sandbox.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/connectors/github/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAmB,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE5E,OAAO,KAAK,EAAE,eAAe,EAA4B,MAAM,YAAY,CAAC;AAE5E,OAAO,KAAK,EACV,kBAAkB,EAEnB,MAAM,yBAAyB,CAAC;AAQjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,gFAAgF;AAChF,eAAO,MAAM,wBAAwB,sBAAsB,CAAC;AAC5D,eAAO,MAAM,4BAA4B,iCAAiC,CAAC;AAE3E,gEAAgE;AAChE,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,wBAAwB,EAAE,SAAS,CAAC,GAC1E,OAAO,CAAC,IAAI,CAAC,wBAAwB,EAAE,aAAa,CAAC,CAAC,CAAC;AAEzD,kDAAkD;AAClD,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,aAAa,CAAC;IACzC,4DAA4D;IAC5D,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,oBAAoB,EAC7B,SAAS,EAAE,eAAe,EAC1B,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CAgEf;AAED,qFAAqF;AACrF,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,eAAe,EAC1B,OAAO,EAAE;IAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,GAAG,aAAa,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GACvE,MAAM,CAuDR;AAED,yEAAyE;AACzE,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,eAAe,EAC1B,OAAO,EAAE,IAAI,CAAC,6BAA6B,EAAE,QAAQ,GAAG,UAAU,CAAC,GAClE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqD7B;AAuMD,mEAAmE;AACnE,eAAO,MAAM,qBAAqB,oBAAoB,CAAC;AAiGvD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAMjE;AA0DD,wEAAwE;AACxE,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAI/D"}