managed-deepagents 0.9.6-dev.2 → 0.9.6-dev.21

package/dist/channels/github/app-setup.js

@@ -0,0 +1,146 @@
+import { handledEventKeys } from "../http/provider.js";
+/**
+ * The App permission each event needs: read to receive it, write to also
+ * reply where it happened.
+ */
+const EVENT_PERMISSIONS = {
+    "issue_comment.created": { permission: "issues", level: "write" },
+    "issue_comment.edited": { permission: "issues", level: "write" },
+    "issues.edited": { permission: "issues", level: "write" },
+    "issues.labeled": { permission: "issues", level: "write" },
+    "issues.opened": { permission: "issues", level: "write" },
+    "issues.reopened": { permission: "issues", level: "write" },
+    "pull_request.closed": { permission: "pull_requests", level: "write" },
+    "pull_request.converted_to_draft": {
+        permission: "pull_requests",
+        level: "write",
+    },
+    "pull_request.edited": { permission: "pull_requests", level: "write" },
+    "pull_request.labeled": { permission: "pull_requests", level: "write" },
+    "pull_request.opened": { permission: "pull_requests", level: "write" },
+    "pull_request.ready_for_review": {
+        permission: "pull_requests",
+        level: "write",
+    },
+    "pull_request.reopened": { permission: "pull_requests", level: "write" },
+    "pull_request.synchronize": { permission: "pull_requests", level: "write" },
+    "pull_request_review.dismissed": {
+        permission: "pull_requests",
+        level: "write",
+    },
+    "pull_request_review.edited": {
+        permission: "pull_requests",
+        level: "write",
+    },
+    "pull_request_review.submitted": {
+        permission: "pull_requests",
+        level: "write",
+    },
+    "pull_request_review_comment.created": {
+        permission: "pull_requests",
+        level: "write",
+    },
+    "pull_request_review_comment.edited": {
+        permission: "pull_requests",
+        level: "write",
+    },
+    "check_run.completed": { permission: "checks", level: "read" },
+    "check_suite.completed": { permission: "checks", level: "read" },
+    push: { permission: "contents", level: "read" },
+    status: { permission: "statuses", level: "read" },
+    "workflow_run.completed": { permission: "actions", level: "read" },
+};
+const MAX_PERMISSIONS = 50;
+/** Keeps the App manifest and the deploy report readable. */
+const MAX_REPOSITORIES = 500;
+const PERMISSION_NAME = /^[a-z][a-z_]{0,63}$/;
+const GITHUB_LOGIN = /^(?!-)(?!.*--)[A-Za-z0-9-]{1,39}(?<!-)$/;
+const REPOSITORY_NAME = /^[A-Za-z0-9._-]{1,100}$/;
+/**
+ * The App the channel's handlers and `app` options need. The CLI reads it
+ * from the channel's manifest instead of working it out; the Python runtime
+ * mirrors these rules in `github_app_setup.py`.
+ */
+export function githubAppSetup(handlers, app) {
+    const events = handledEventKeys(handlers).filter(isSupportedEventKey);
+    // A misspelled option would silently widen what the agent's token reaches.
+    const unknown = Object.keys(app ?? {}).filter((key) => key !== "permissions" && key !== "repositories");
+    if (unknown.length)
+        throw new TypeError(`unknown GitHub app option ${unknown.join(", ")}; use permissions or repositories`);
+    const repositories = repositoryAllowlist(app?.repositories);
+    return {
+        events,
+        webhookEvents: [...new Set(events.map((key) => key.split(".")[0]))].sort(),
+        permissions: appPermissions(events, app?.permissions ?? {}),
+        ...(repositories && { repositories }),
+    };
+}
+function isSupportedEventKey(key) {
+    return Object.hasOwn(EVENT_PERMISSIONS, key);
+}
+/**
+ * Every App gets `metadata: read`; each handled event raises its permission
+ * to the level it needs, and `app.permissions` can raise it further.
+ */
+function appPermissions(events, extra) {
+    checkPermissions(extra);
+    const permissions = new Map([
+        ["metadata", { name: "metadata", level: "read", events: [] }],
+    ]);
+    for (const key of events) {
+        const { permission, level } = EVENT_PERMISSIONS[key];
+        const current = permissions.get(permission);
+        if (!current || (current.level === "read" && level === "write"))
+            permissions.set(permission, { name: permission, level, events: [key] });
+        else if (current.level === level)
+            current.events.push(key);
+    }
+    for (const [name, level] of Object.entries(extra)) {
+        const current = permissions.get(name);
+        if (!current || (current.level === "read" && level === "write"))
+            permissions.set(name, { name, level, events: [] });
+    }
+    return [...permissions.values()].sort((a, b) => a.name.localeCompare(b.name));
+}
+/** JavaScript callers can pass anything, so check what types promise. */
+function checkPermissions(permissions) {
+    const names = Object.keys(permissions).sort();
+    if (names.length > MAX_PERMISSIONS)
+        throw new TypeError(`GitHub app.permissions must list at most ${MAX_PERMISSIONS} permissions`);
+    for (const name of names) {
+        if (!PERMISSION_NAME.test(name))
+            throw new TypeError(`GitHub app.permissions has an invalid permission name '${name}'; use GitHub's names, such as contents`);
+        if (permissions[name] !== "read" && permissions[name] !== "write")
+            throw new TypeError(`GitHub app.permissions.${name} must be read or write`);
+    }
+}
+/**
+ * The repositories the channel is limited to, lowercased since GitHub names
+ * are case-insensitive. One installation covers them, so they share an owner.
+ */
+export function repositoryAllowlist(repositories) {
+    if (repositories === undefined)
+        return undefined;
+    // An empty list could mean "none" or "all"; neither should be silent.
+    if (repositories.length === 0)
+        throw new TypeError("GitHub app.repositories must list at least one repository; omit it to allow every repository");
+    const valid = new Set();
+    for (const entry of repositories) {
+        const repository = entry.trim();
+        const [owner = "", name = "", ...rest] = repository.split("/");
+        if (rest.length > 0 ||
+            !GITHUB_LOGIN.test(owner) ||
+            !REPOSITORY_NAME.test(name) ||
+            name === "." ||
+            name === "..")
+            throw new TypeError(`GitHub app.repositories entry '${repository}' must be owner/name`);
+        valid.add(repository.toLowerCase());
+    }
+    if (valid.size > MAX_REPOSITORIES)
+        throw new TypeError(`GitHub app.repositories must list at most ${MAX_REPOSITORIES} repositories`);
+    const owners = [...new Set([...valid].map((r) => r.split("/")[0]))].sort();
+    if (owners.length > 1)
+        throw new TypeError(`GitHub app.repositories must all belong to one owner, because one installation covers them (found: ${owners.join(", ")})`);
+    return [...valid].sort();
+}
+//# sourceMappingURL=app-setup.js.map

package/dist/channels/github/app-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-setup.js","sourceRoot":"","sources":["../../../src/channels/github/app-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAKvD;;;GAGG;AACH,MAAM,iBAAiB,GAAG;IACxB,uBAAuB,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;IACjE,sBAAsB,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;IAChE,eAAe,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;IACzD,gBAAgB,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;IAC1D,eAAe,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;IACzD,iBAAiB,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;IAC3D,qBAAqB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE;IACtE,iCAAiC,EAAE;QACjC,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE,OAAO;KACf;IACD,qBAAqB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE;IACtE,sBAAsB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE;IACvE,qBAAqB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE;IACtE,+BAA+B,EAAE;QAC/B,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE,OAAO;KACf;IACD,uBAAuB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE;IACxE,0BAA0B,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE;IAC3E,+BAA+B,EAAE;QAC/B,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE,OAAO;KACf;IACD,4BAA4B,EAAE;QAC5B,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE,OAAO;KACf;IACD,+BAA+B,EAAE;QAC/B,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE,OAAO;KACf;IACD,qCAAqC,EAAE;QACrC,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE,OAAO;KACf;IACD,oCAAoC,EAAE;QACpC,UAAU,EAAE,eAAe;QAC3B,KAAK,EAAE,OAAO;KACf;IACD,qBAAqB,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE;IAC9D,uBAAuB,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE;IAChE,IAAI,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE;IAC/C,MAAM,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE;IACjD,wBAAwB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE;CAInE,CAAC;AAEF,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,6DAA6D;AAC7D,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAC9C,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAC/D,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAqBlD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAgB,EAChB,GAAiC;IAEjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACtE,2EAA2E;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,MAAM,CAC3C,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,cAAc,CACzD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM;QAChB,MAAM,IAAI,SAAS,CACjB,6BAA6B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,CACnF,CAAC;IACJ,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5D,OAAO;QACL,MAAM;QACN,aAAa,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QAC3E,WAAW,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,IAAI,EAAE,CAAC;QAC3D,GAAG,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CACrB,MAAoC,EACpC,KAAgD;IAEhD,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAwB;QACjD,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;KAC9D,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC;YAC7D,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aACrE,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;YAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC;YAC7D,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,yEAAyE;AACzE,SAAS,gBAAgB,CAAC,WAA6C;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe;QAChC,MAAM,IAAI,SAAS,CACjB,4CAA4C,eAAe,cAAc,CAC1E,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAC7B,MAAM,IAAI,SAAS,CACjB,0DAA0D,IAAI,yCAAyC,CACxG,CAAC;QACJ,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,OAAO;YAC/D,MAAM,IAAI,SAAS,CACjB,0BAA0B,IAAI,wBAAwB,CACvD,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,YAA2C;IAE3C,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACjD,sEAAsE;IACtE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAC3B,MAAM,IAAI,SAAS,CACjB,8FAA8F,CAC/F,CAAC;IACJ,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/D,IACE,IAAI,CAAC,MAAM,GAAG,CAAC;YACf,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YACzB,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3B,IAAI,KAAK,GAAG;YACZ,IAAI,KAAK,IAAI;YAEb,MAAM,IAAI,SAAS,CACjB,kCAAkC,UAAU,sBAAsB,CACnE,CAAC;QACJ,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,GAAG,gBAAgB;QAC/B,MAAM,IAAI,SAAS,CACjB,6CAA6C,gBAAgB,eAAe,CAC7E,CAAC;IACJ,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QACnB,MAAM,IAAI,SAAS,CACjB,sGAAsG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3H,CAAC;IACJ,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/channels/github/connections.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Reserved agent connection for the deployment's GitHub App: reading it
+ * returns an installation token for the App `mda deploy` set up.
+ */
+export declare const GITHUB_TOKEN_SLUG = "mda/github-token";
+/**
+ * The deployment's GitHub App connection, or one of the App values stored
+ * beside it (`webhook-secret`, `bot-id`) when `suffix` is given.
+ */
+export declare function githubAppConnectionSlug(deploymentId: string, suffix?: string): string;
+//# sourceMappingURL=connections.d.ts.map

package/dist/channels/github/connections.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.d.ts","sourceRoot":"","sources":["../../../src/channels/github/connections.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,eAAO,MAAM,iBAAiB,qBAAqB,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,CAER"}

package/dist/channels/github/connections.js

@@ -0,0 +1,14 @@
+import { appConnectionSlug } from "../http/provider.js";
+/**
+ * Reserved agent connection for the deployment's GitHub App: reading it
+ * returns an installation token for the App `mda deploy` set up.
+ */
+export const GITHUB_TOKEN_SLUG = "mda/github-token";
+/**
+ * The deployment's GitHub App connection, or one of the App values stored
+ * beside it (`webhook-secret`, `bot-id`) when `suffix` is given.
+ */
+export function githubAppConnectionSlug(deploymentId, suffix) {
+    return appConnectionSlug("github", deploymentId, suffix);
+}
+//# sourceMappingURL=connections.js.map

package/dist/channels/github/connections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connections.js","sourceRoot":"","sources":["../../../src/channels/github/connections.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAEpD;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAAoB,EACpB,MAAe;IAEf,OAAO,iBAAiB,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC"}

package/dist/channels/github/index.d.ts

@@ -0,0 +1,12 @@
+import { type HttpChannel } from "../http/index.js";
+import type { GitHubChannelOptions } from "./types.js";
+export type { GitHubAppOptions, GitHubChannelOptions, GitHubChannelThread, GitHubEvent, GitHubEventCallback, GitHubEventResult, PayloadFor, SupportedEventKey, } from "./types.js";
+/**
+ * Adapt verified GitHub events into HTTP channel messages or skips.
+ *
+ * @experimental The GitHub channel may change in a minor release.
+ */
+export declare function githubChannel(options?: GitHubChannelOptions): HttpChannel;
+/** Forget values read from Agent Auth; for tests. */
+export declare function resetGitHubAppValues(): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/channels/github/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/channels/github/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,WAAW,EAKjB,MAAM,kBAAkB,CAAC;AAgC1B,OAAO,KAAK,EACV,oBAAoB,EAIrB,MAAM,YAAY,CAAC;AAGpB,YAAY,EACV,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,UAAU,EACV,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAWpB;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,WAAW,CAkD7E;AA2CD,qDAAqD;AACrD,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C"}

package/dist/channels/github/index.js

@@ -0,0 +1,266 @@
+import { channelThreadId, httpChannel, withAgentConnections, } from "../http/index.js";
+import { withResolveUser } from "../resolve-user.js";
+import { channelName, checkEventKeys, eventSnapshot, readDeploymentSecret, resetDeploymentSecrets, resolveEndpoints, runEventHandler, eventThread, finishEvents, receiveEvents, verifyHmacSha256, } from "../http/provider.js";
+import { isEndpointCallback } from "../http/endpoint.js";
+import { interruptedNotice, pendingDecision } from "../http/studio.js";
+import { withPausedNotice } from "../messaging-registry.js";
+import { logger } from "../../runtime/log.js";
+import { connections } from "../../connections.js";
+import { ConnectionsNotConfiguredError } from "../../agent-auth.js";
+import { githubAppSetup } from "./app-setup.js";
+import { GITHUB_TOKEN_SLUG, githubAppConnectionSlug } from "./connections.js";
+import { ENDPOINT_EVENT_FIELDS, SUPPORTED_EVENT_KEYS, githubReceiptSchema, githubIdentifierSchema, githubEventSchema, } from "./schema.js";
+const EVENT_KEYS = new Set(SUPPORTED_EVENT_KEYS);
+/**
+ * Adapt verified GitHub events into HTTP channel messages or skips.
+ *
+ * @experimental The GitHub channel may change in a minor release.
+ */
+export function githubChannel(options = {}) {
+    const handlers = resolveEndpoints("GitHub", options.onEvent, ENDPOINT_EVENT_FIELDS);
+    checkEventKeys("GitHub", handlers, EVENT_KEYS);
+    const appSetup = githubAppSetup(handlers, options.app);
+    const channel = httpChannel({
+        provider: "github",
+        ...(options.multitaskStrategy && {
+            multitaskStrategy: options.multitaskStrategy,
+        }),
+        // mda deploy sets up the GitHub App from this.
+        providerConfig: appSetup,
+        verify: verifyGitHubRequest,
+        parse: (context) => parseGitHubRequest(context, handlers, channelName(channel), appSetup.repositories),
+        input: (message, rawEvent) => handlerInput(handlers, rawEvent, {
+            id: message.threadId,
+            channel: { name: channelName(channel) },
+        }),
+        onReceived: receiveEvents(options.onReceived, githubEvent, () => channelName(channel)),
+        onFinish: finishEvents((target, delivery) => notifyWaiting(handlers, target, delivery, channelName(channel)), options.onFinish, githubEvent, (delivery) => eventThread(delivery, channelName(channel))),
+    });
+    // A run that stops on interrupts says so itself (../delivery.ts): the
+    // handler accepted the event that started it.
+    // Deploy provides the App's token at this name.
+    withAgentConnections(channel, [GITHUB_TOKEN_SLUG]);
+    return withPausedNotice(withResolveUser(channel, options.resolveUser, "channels.github"), postInterruptedNotice);
+}
+/**
+ * Tell the issue or pull request that a new event found its thread waiting
+ * on a decision. Only for an event its handler would act on, so the handler's
+ * filters, such as trusted senders or mentions, decide who gets a notice. The
+ * handler knows it is only asked, so it can skip side effects.
+ */
+async function notifyWaiting(handlers, target, delivery, name) {
+    if (pendingDecision(delivery) !== "waiting")
+        return;
+    if ((await handlerInput(handlers, delivery.rawEvent, {
+        id: delivery.threadId,
+        channel: { name },
+        interrupted: true,
+    })) === undefined)
+        return;
+    await postInterruptedNotice(target, delivery, "waiting");
+}
+/**
+ * The App's webhook secret or bot ID: the `GH_*` env override when set,
+ * otherwise the agent secret Agent Auth stored when `mda deploy` created the
+ * App, at `mda/github-app/{deployment}/{suffix}`. Only a missing connection
+ * reads as `undefined`; credential store failures propagate.
+ */
+function gitHubAppValue(envKey, suffix) {
+    return readDeploymentSecret(envKey, (deploymentId) => githubAppConnectionSlug(deploymentId, suffix), `GitHub App ${suffix}`);
+}
+/** Forget values read from Agent Auth; for tests. */
+export function resetGitHubAppValues() {
+    resetDeploymentSecrets();
+}
+/** GitHub's delivery ID for a log line, or `unknown` when it is not one. */
+function deliveryLabel(deliveryId) {
+    return deliveryId && /^[0-9a-fA-F-]{1,64}$/.test(deliveryId)
+        ? deliveryId
+        : "unknown";
+}
+async function verifyGitHubRequest({ request, rawBody, }) {
+    // GitHub pings a new App before Agent Auth has its webhook secret, and a
+    // ping starts nothing, so it needs no secret. Reading it here would also
+    // remember the secret as missing and reject the first real events.
+    if (request.headers.get("x-github-event") === "ping")
+        return true;
+    // Reject unsigned deliveries before reading the secret from Agent Auth.
+    const signature = request.headers.get("x-hub-signature-256") ?? "";
+    if (!/^sha256=[a-fA-F0-9]{64}$/.test(signature))
+        return false;
+    let secret;
+    try {
+        secret = await gitHubAppValue("GH_WEBHOOK_SECRET", "webhook-secret");
+    }
+    catch (error) {
+        if (error instanceof ConnectionsNotConfiguredError) {
+            // The message names only the missing setting, so it is safe to log.
+            logger.error(`GitHub delivery ${deliveryLabel(request.headers.get("x-github-delivery"))} ` +
+                `cannot be verified: ${error.message}`);
+        }
+        throw error;
+    }
+    if (!secret)
+        return false;
+    return verifyHmacSha256(secret, rawBody, signature.slice(7));
+}
+async function parseGitHubRequest({ request }, handlers, channelName, repositories) {
+    const envelope = githubReceiptSchema.parse({
+        event: request.headers.get("x-github-event"),
+        deliveryId: request.headers.get("x-github-delivery"),
+        payload: await request.json(),
+    });
+    const { event, deliveryId, payload } = envelope;
+    logReceipt(envelope);
+    const response = Response.json({ status: "received" }, { status: event === "ping" ? 200 : 202 });
+    // Events nothing handles stop here, before run creation.
+    // Events without an action, such as `push`, are keyed by their name.
+    const key = (payload.action === undefined ? event : `${event}.${payload.action}`);
+    if (!Object.hasOwn(handlers, key) || handlers[key] === undefined)
+        return { type: "ignore", response };
+    const parsedEvent = githubEventSchema.parse({ key, payload, deliveryId });
+    // Events from repositories the channel is not limited to start nothing.
+    if (repositories &&
+        !repositories.includes(parsedEvent.repository.fullName.toLowerCase()))
+        return { type: "ignore", response };
+    // Ignore the App's own activity to avoid triggering ourselves.
+    const configuredBotId = (await gitHubAppValue("GH_APP_BOT_ID", "bot-id")) ?? "";
+    if (!/^[1-9][0-9]*$/.test(configuredBotId))
+        throw new TypeError("GitHub App bot ID is unavailable; run `mda deploy` to store it or set GH_APP_BOT_ID");
+    const botId = githubIdentifierSchema.parse(Number(configuredBotId));
+    if (parsedEvent.sender.id === botId)
+        return { type: "ignore", response };
+    // Preserve the original event even if a callback modifies its argument.
+    const snapshot = eventSnapshot(parsedEvent, "GitHub");
+    // One thread per issue or pull request, so the agent keeps the
+    // conversation. Other events get their own thread, keyed by the delivery so
+    // a redelivery still finds the run it started.
+    const number = conversationNumber(parsedEvent);
+    const threadId = channelThreadId(channelName, number === undefined
+        ? `delivery/${deliveryId}`
+        : `${parsedEvent.repository.id}/${number}`);
+    const target = number === undefined
+        ? null
+        : { repository: parsedEvent.repository.fullName, number };
+    // What the run starts with is decided once MDA knows the thread takes a
+    // new turn.
+    return {
+        type: "message",
+        message: {
+            threadId,
+            userId: senderUserId(parsedEvent.sender),
+            target,
+            deliveryKey: deliveryId,
+            // An endpoint may take longer to answer than GitHub waits.
+            ...(isEndpointCallback(handlers[key]) && { background: true }),
+        },
+        rawEvent: snapshot,
+        actor: parsedEvent.actor,
+        response,
+    };
+}
+/**
+ * Who the run acts for. GitHub signs each delivery, so its sender is verified:
+ * a person acts as `github:<id>`, by the numeric ID that outlives login
+ * renames, and gets their own user memory where the agent allows it. Bots and
+ * organizations run as the channel.
+ */
+function senderUserId(sender) {
+    return sender.type === "User" ? `github:${sender.id}` : "mda:channel";
+}
+/** What the event's handler starts a run with; `undefined` when it skips or fails. */
+async function handlerInput(handlers, rawEvent, thread) {
+    const event = githubEvent(rawEvent);
+    const handler = event && Object.hasOwn(handlers, event.key)
+        ? handlers[event.key]
+        : undefined;
+    if (!event || !handler)
+        return undefined;
+    const outcome = await runEventHandler("GitHub", event, () => handler(event, thread));
+    return outcome.type === "input" ? outcome.input : undefined;
+}
+/** The parsed event a delivery carries, as handlers may change it. */
+function githubEvent(rawEvent) {
+    if (!rawEvent || typeof rawEvent !== "object" || Array.isArray(rawEvent))
+        return undefined;
+    const event = structuredClone(rawEvent);
+    return EVENT_KEYS.has(event.key) ? event : undefined;
+}
+/** The issue or pull request an event is about, if any. */
+function conversationNumber(event) {
+    const payload = event.payload;
+    for (const subject of ["issue", "pull_request"]) {
+        const number = payload[subject]
+            ?.number;
+        if (isIssueNumber(number))
+            return number;
+    }
+    // A CI run belongs to a pull request only when it ran for exactly one.
+    for (const run of ["workflow_run", "check_run", "check_suite"]) {
+        const pullRequests = payload[run]?.pull_requests;
+        if (Array.isArray(pullRequests) && pullRequests.length === 1) {
+            const number = pullRequests[0]?.number;
+            if (isIssueNumber(number))
+                return number;
+        }
+    }
+    return undefined;
+}
+function isIssueNumber(value) {
+    return typeof value === "number" && Number.isSafeInteger(value) && value > 0;
+}
+const REPOSITORY_PATTERN = /^[A-Za-z0-9-]+\/[A-Za-z0-9._-]+$/;
+const GITHUB_API_TIMEOUT_MS = 10_000;
+/**
+ * The thread waits on an interrupt, so tell the issue or pull request where
+ * to continue it. Posts as the App; the notice is fixed text.
+ */
+async function postInterruptedNotice(target, delivery, outcome) {
+    if (!isGitHubTarget(target))
+        return;
+    const [owner, name] = target.repository.split("/");
+    const token = await connections.resolveDeploymentSecret(GITHUB_TOKEN_SLUG);
+    const response = await fetch(`https://api.github.com/repos/${encodeURIComponent(owner)}/${encodeURIComponent(name)}/issues/${target.number}/comments`, {
+        method: "POST",
+        headers: {
+            Accept: "application/vnd.github+json",
+            Authorization: `Bearer ${token}`,
+            "Content-Type": "application/json",
+            "X-GitHub-Api-Version": "2022-11-28",
+        },
+        body: JSON.stringify({
+            body: interruptedNotice(outcome, delivery, "comment again"),
+        }),
+        signal: AbortSignal.timeout(GITHUB_API_TIMEOUT_MS),
+    });
+    if (!response.ok)
+        throw new Error(`GitHub refused the interrupted notice (HTTP ${response.status})`);
+}
+function isGitHubTarget(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const { repository, number } = value;
+    return (typeof repository === "string" &&
+        REPOSITORY_PATTERN.test(repository) &&
+        isIssueNumber(number));
+}
+function logReceipt({ event, deliveryId, payload, }) {
+    const receipt = {
+        event: logger.logIdentifier(event),
+        deliveryId: logger.logIdentifier(deliveryId),
+    };
+    if (payload.action !== undefined)
+        receipt.action = logger.logIdentifier(payload.action);
+    for (const [key, field] of [
+        ["repository", "id"],
+        ["issue", "number"],
+        ["pull_request", "number"],
+    ]) {
+        const id = payload[key]?.[field];
+        if (typeof id === "number")
+            receipt[key] = id;
+    }
+    logger.info(`github receipt ${JSON.stringify(receipt)}`);
+    return receipt;
+}
+//# sourceMappingURL=index.js.map

package/dist/channels/github/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/channels/github/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,eAAe,EACf,WAAW,EACX,oBAAoB,GAMrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,WAAW,EACX,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,YAAY,EACZ,aAAa,EACb,gBAAgB,GAEjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAsB,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAE5D,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AA2BrB,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAEtE;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAO,GAAyB,EAAE;IAC9D,MAAM,QAAQ,GAAa,gBAAgB,CACzC,QAAQ,EACR,OAAO,CAAC,OAEP,EACD,qBAAqB,CACtB,CAAC;IACF,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAEvD,MAAM,OAAO,GAAG,WAAW,CAAC;QAC1B,QAAQ,EAAE,QAAQ;QAClB,GAAG,CAAC,OAAO,CAAC,iBAAiB,IAAI;YAC/B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;SAC7C,CAAC;QACF,+CAA+C;QAC/C,cAAc,EAAE,QAAQ;QACxB,MAAM,EAAE,mBAAmB;QAC3B,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACjB,kBAAkB,CAChB,OAAO,EACP,QAAQ,EACR,WAAW,CAAC,OAAO,CAAC,EACpB,QAAQ,CAAC,YAAY,CACtB;QACH,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAC3B,YAAY,CAAC,QAAQ,EAAE,QAAQ,EAAE;YAC/B,EAAE,EAAE,OAAO,CAAC,QAAQ;YACpB,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE;SACxC,CAAC;QACJ,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,CAC9D,WAAW,CAAC,OAAO,CAAC,CACrB;QACD,QAAQ,EAAE,YAAY,CACpB,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CACnB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,EACjE,OAAO,CAAC,QAAQ,EAChB,WAAW,EACX,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAC1D;KACF,CAAC,CAAC;IACH,sEAAsE;IACtE,8CAA8C;IAC9C,gDAAgD;IAChD,oBAAoB,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACnD,OAAO,gBAAgB,CACrB,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAChE,qBAAqB,CACtB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAC1B,QAAkB,EAClB,MAAiB,EACjB,QAA8B,EAC9B,IAAY;IAEZ,IAAI,eAAe,CAAC,QAAQ,CAAC,KAAK,SAAS;QAAE,OAAO;IACpD,IACE,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;QAC/C,EAAE,EAAE,QAAQ,CAAC,QAAQ;QACrB,OAAO,EAAE,EAAE,IAAI,EAAE;QACjB,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC,KAAK,SAAS;QAEjB,OAAO;IACT,MAAM,qBAAqB,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CACrB,MAA6C,EAC7C,MAAmC;IAEnC,OAAO,oBAAoB,CACzB,MAAM,EACN,CAAC,YAAY,EAAE,EAAE,CAAC,uBAAuB,CAAC,YAAY,EAAE,MAAM,CAAC,EAC/D,cAAc,MAAM,EAAE,CACvB,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,oBAAoB;IAClC,sBAAsB,EAAE,CAAC;AAC3B,CAAC;AAED,4EAA4E;AAC5E,SAAS,aAAa,CAAC,UAAyB;IAC9C,OAAO,UAAU,IAAI,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC;QAC1D,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,EACjC,OAAO,EACP,OAAO,GACY;IACnB,yEAAyE;IACzE,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClE,wEAAwE;IACxE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,cAAc,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,6BAA6B,EAAE,CAAC;YACnD,oEAAoE;YACpE,MAAM,CAAC,KAAK,CACV,mBAAmB,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,GAAG;gBAC3E,uBAAuB,KAAK,CAAC,OAAO,EAAE,CACzC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,OAAO,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,EAAE,OAAO,EAAsB,EAC/B,QAAkB,EAClB,WAAmB,EACnB,YAAkC;IAElC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC;QACzC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC5C,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACpD,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,EAAE;KAC9B,CAAC,CAAC;IACH,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC;IAChD,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrB,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAC5B,EAAE,MAAM,EAAE,UAAU,EAAE,EACtB,EAAE,MAAM,EAAE,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CACzC,CAAC;IAEF,yDAAyD;IACzD,qEAAqE;IACrE,MAAM,GAAG,GAAG,CACV,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAC/C,CAAC;IACvB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;QAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAEtC,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IAE1E,wEAAwE;IACxE,IACE,YAAY;QACZ,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAErE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAEtC,+DAA+D;IAC/D,MAAM,eAAe,GACnB,CAAC,MAAM,cAAc,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC;QACxC,MAAM,IAAI,SAAS,CACjB,qFAAqF,CACtF,CAAC;IACJ,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IACpE,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAEzE,wEAAwE;IACxE,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEtD,+DAA+D;IAC/D,4EAA4E;IAC5E,+CAA+C;IAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,eAAe,CAC9B,WAAW,EACX,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,YAAY,UAAU,EAAE;QAC1B,CAAC,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,EAAE,IAAI,MAAM,EAAE,CAC7C,CAAC;IACF,MAAM,MAAM,GACV,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC9D,wEAAwE;IACxE,YAAY;IACZ,OAAO;QACL,IAAI,EAAE,SAAS;QACf,OAAO,EAAE;YACP,QAAQ;YACR,MAAM,EAAE,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC;YACxC,MAAM;YACN,WAAW,EAAE,UAAU;YACvB,2DAA2D;YAC3D,GAAG,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;SAC/D;QACD,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,MAAoC;IACxD,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;AACxE,CAAC;AAED,sFAAsF;AACtF,KAAK,UAAU,YAAY,CACzB,QAAkB,EAClB,QAA+B,EAC/B,MAA2B;IAE3B,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,OAAO,GACX,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC;QACzC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;QACrB,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAC1D,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CACvB,CAAC;IACF,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,sEAAsE;AACtE,SAAS,WAAW,CAAC,QAA+B;IAClD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAA2B,CAAC;IAClE,OAAO,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,2DAA2D;AAC3D,SAAS,kBAAkB,CACzB,KAAwC;IAExC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAC;IACzD,KAAK,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC;QAChD,MAAM,MAAM,GAAI,OAAO,CAAC,OAAO,CAAsC;YACnE,EAAE,MAAM,CAAC;QACX,IAAI,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IAC3C,CAAC;IACD,uEAAuE;IACvE,KAAK,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;QAC/D,MAAM,YAAY,GAChB,OAAO,CAAC,GAAG,CACZ,EAAE,aAAa,CAAC;QACjB,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,MAAM,GAAI,YAAY,CAAC,CAAC,CAAiC,EAAE,MAAM,CAAC;YACxE,IAAI,aAAa,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAC/E,CAAC;AAKD,MAAM,kBAAkB,GAAG,kCAAkC,CAAC;AAC9D,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAErC;;;GAGG;AACH,KAAK,UAAU,qBAAqB,CAClC,MAAiB,EACjB,QAAsB,EACtB,OAAkC;IAElC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO;IACpC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,gCAAgC,kBAAkB,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,MAAM,WAAW,EACxH;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,MAAM,EAAE,6BAA6B;YACrC,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,kBAAkB;YAClC,sBAAsB,EAAE,YAAY;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,IAAI,EAAE,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC;SAC5D,CAAC;QACF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC;KACnD,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QACd,MAAM,IAAI,KAAK,CACb,+CAA+C,QAAQ,CAAC,MAAM,GAAG,CAClE,CAAC;AACN,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB;IACtC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,KAAgC,CAAC;IAChE,OAAO,CACL,OAAO,UAAU,KAAK,QAAQ;QAC9B,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC;QACnC,aAAa,CAAC,MAAM,CAAC,CACtB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,EAClB,KAAK,EACL,UAAU,EACV,OAAO,GAC6B;IACpC,MAAM,OAAO,GAAoC;QAC/C,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;QAClC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;KAC7C,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAC9B,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAExD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI;QACzB,CAAC,YAAY,EAAE,IAAI,CAAC;QACpB,CAAC,OAAO,EAAE,QAAQ,CAAC;QACnB,CAAC,cAAc,EAAE,QAAQ,CAAC;KAClB,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAChD,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/channels/github/mentions.d.ts

@@ -0,0 +1,12 @@
+/** The handles an event's text mentions: GitHub sends no event for a mention. */
+import type { z } from "zod";
+import type { githubDispatchSchema } from "./schema.js";
+type DispatchEvent = z.output<typeof githubDispatchSchema>;
+/**
+ * The handles, such as `@octocat`, the text the event wrote mentions:
+ * lowercased, each once, in order. As on GitHub, code, quotes and HTML
+ * comments mention no one. An edit lists only the handles it added.
+ */
+export declare function eventMentions(event: DispatchEvent): string[];
+export {};
+//# sourceMappingURL=mentions.d.ts.map

package/dist/channels/github/mentions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mentions.d.ts","sourceRoot":"","sources":["../../../src/channels/github/mentions.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAExD,KAAK,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAyD3D;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,EAAE,CA0B5D"}