oh-my-claude-sisyphus 3.7.6 → 3.7.8

package/dist/hooks/github-auto-responder/server.js

@@ -0,0 +1,301 @@
+/**
+ * GitHub Auto Responder - HTTP Webhook Server
+ *
+ * HTTP server that receives GitHub webhook events, verifies signatures,
+ * and delegates to the AutoResponder for processing.
+ *
+ * Features:
+ * - HMAC-SHA256 signature verification for security
+ * - 1MB body size limit to prevent memory exhaustion
+ * - Graceful shutdown on SIGTERM/SIGINT
+ * - Health check endpoint for monitoring
+ * - Fire-and-forget webhook processing (responds 200 immediately)
+ * - JSON responses for all endpoints
+ */
+import http from 'node:http';
+import { verifySignature } from './signature.js';
+/** Maximum request body size (1MB) */
+const MAX_BODY_SIZE = 1024 * 1024;
+/**
+ * Read the full request body as a Buffer.
+ *
+ * Enforces a maximum size limit to prevent memory exhaustion attacks.
+ *
+ * @param req - HTTP request
+ * @returns Request body as Buffer
+ * @throws Error if body exceeds MAX_BODY_SIZE
+ */
+async function readBody(req) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let totalSize = 0;
+        req.on('data', (chunk) => {
+            totalSize += chunk.length;
+            if (totalSize > MAX_BODY_SIZE) {
+                req.destroy();
+                reject(new Error(`Request body exceeds ${MAX_BODY_SIZE} bytes`));
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => {
+            resolve(Buffer.concat(chunks));
+        });
+        req.on('error', (err) => {
+            reject(err);
+        });
+    });
+}
+/**
+ * HTTP webhook server for GitHub events.
+ *
+ * Endpoints:
+ * - GET /health - Health check (returns 200 with status)
+ * - POST /webhook - Webhook receiver (signature verification + processing)
+ * - Other routes - 404 Not Found
+ *
+ * Webhook processing is fire-and-forget: the server responds 200 immediately
+ * after signature verification, then processes asynchronously. Errors during
+ * processing are logged but don't affect the HTTP response.
+ *
+ * @example
+ * ```typescript
+ * const responder = createAutoResponder(config);
+ * await responder.init();
+ *
+ * const server = createWebhookServer(responder, config);
+ * await server.start();
+ *
+ * // Later...
+ * await server.stop();
+ * ```
+ */
+export class WebhookServer {
+    responder;
+    config;
+    /** HTTP server instance */
+    server;
+    /** Whether the server is currently running */
+    running = false;
+    /**
+     * Create a new webhook server.
+     *
+     * @param responder - AutoResponder instance for webhook processing
+     * @param config - Server configuration (port, webhook secret, etc.)
+     */
+    constructor(responder, config) {
+        this.responder = responder;
+        this.config = config;
+        this.server = http.createServer((req, res) => this.handleRequest(req, res));
+    }
+    /**
+     * Start the HTTP server and listen on configured port.
+     *
+     * @throws Error if server is already running or fails to bind
+     */
+    async start() {
+        if (this.running) {
+            throw new Error('Server is already running');
+        }
+        return new Promise((resolve, reject) => {
+            this.server.once('error', reject);
+            this.server.listen(this.config.port, () => {
+                this.running = true;
+                console.log(`[webhook-server] Listening on http://localhost:${this.config.port}`);
+                resolve();
+            });
+        });
+    }
+    /**
+     * Route incoming requests to appropriate handlers.
+     *
+     * Routes:
+     * - GET /health → handleHealth()
+     * - POST /webhook → handleWebhook()
+     * - Other → 404
+     *
+     * @param req - HTTP request
+     * @param res - HTTP response
+     */
+    handleRequest(req, res) {
+        const { method, url } = req;
+        if (method === 'GET' && url === '/health') {
+            this.handleHealth(res);
+        }
+        else if (method === 'POST' && url === '/webhook') {
+            this.handleWebhook(req, res).catch((err) => {
+                console.error('[webhook-server] Unhandled error in webhook handler:', err);
+                if (!res.headersSent) {
+                    res.writeHead(500, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ error: 'Internal server error' }));
+                }
+            });
+        }
+        else {
+            res.writeHead(404, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Not found' }));
+        }
+    }
+    /**
+     * Handle health check requests.
+     *
+     * Returns 200 with JSON status payload.
+     *
+     * @param res - HTTP response
+     */
+    handleHealth(res) {
+        res.writeHead(200, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ status: 'healthy' }));
+    }
+    /**
+     * Handle webhook POST requests.
+     *
+     * Processing pipeline:
+     * 1. Read raw request body as Buffer
+     * 2. Verify HMAC-SHA256 signature
+     * 3. Parse JSON payload
+     * 4. Extract event type and delivery ID from headers
+     * 5. Respond 200 OK immediately
+     * 6. Process webhook asynchronously (fire-and-forget)
+     *
+     * Errors during validation return appropriate HTTP status codes.
+     * Errors during async processing are logged but don't affect the response.
+     *
+     * @param req - HTTP request
+     * @param res - HTTP response
+     */
+    async handleWebhook(req, res) {
+        try {
+            // Step 1: Read raw body (needed for signature verification)
+            const rawBody = await readBody(req);
+            // Step 2: Verify signature
+            const signature = req.headers['x-hub-signature-256'];
+            if (!signature) {
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Missing X-Hub-Signature-256 header' }));
+                return;
+            }
+            const isValid = verifySignature(rawBody, signature, this.config.webhookSecret);
+            if (!isValid) {
+                console.error('[webhook-server] Invalid signature');
+                res.writeHead(401, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Invalid signature' }));
+                return;
+            }
+            // Step 3: Parse JSON payload
+            let payload;
+            try {
+                payload = JSON.parse(rawBody.toString('utf-8'));
+            }
+            catch (err) {
+                console.error('[webhook-server] Invalid JSON:', err);
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Invalid JSON payload' }));
+                return;
+            }
+            // Step 4: Extract metadata from headers
+            const eventType = req.headers['x-github-event'];
+            const deliveryId = req.headers['x-github-delivery'];
+            if (!eventType) {
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Missing X-GitHub-Event header' }));
+                return;
+            }
+            if (!deliveryId) {
+                res.writeHead(400, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Missing X-GitHub-Delivery header' }));
+                return;
+            }
+            console.log(`[webhook-server] Received ${eventType} event (delivery: ${deliveryId})`);
+            // Step 5: Respond 200 immediately (GitHub expects quick response)
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ status: 'accepted' }));
+            // Step 6: Process webhook asynchronously (fire-and-forget)
+            this.responder.processWebhook(deliveryId, payload).catch((err) => {
+                console.error(`[webhook-server] Error processing webhook ${deliveryId}:`, err);
+            });
+        }
+        catch (err) {
+            // Errors during validation (before response sent)
+            console.error('[webhook-server] Webhook validation error:', err);
+            if (!res.headersSent) {
+                res.writeHead(500, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ error: 'Internal server error' }));
+            }
+        }
+    }
+    /**
+     * Gracefully shut down the server.
+     *
+     * Stops accepting new connections and waits for existing requests
+     * to complete. Also closes the AutoResponder.
+     *
+     * Safe to call multiple times.
+     */
+    async stop() {
+        if (!this.running) {
+            return;
+        }
+        return new Promise((resolve, reject) => {
+            this.server.close((err) => {
+                if (err) {
+                    reject(err);
+                }
+                else {
+                    this.running = false;
+                    console.log('[webhook-server] Server stopped');
+                    // Close the responder (shuts down idempotency store)
+                    this.responder.close().then(resolve).catch(reject);
+                }
+            });
+        });
+    }
+}
+/**
+ * Factory function to create a new webhook server.
+ *
+ * @param responder - AutoResponder instance for webhook processing
+ * @param config - Server configuration
+ * @returns New WebhookServer instance (call start() to begin listening)
+ *
+ * @example
+ * ```typescript
+ * import { loadConfig } from './config.js';
+ * import { createAutoResponder } from './responder.js';
+ * import { createWebhookServer } from './server.js';
+ *
+ * const config = loadConfig();
+ * const responder = createAutoResponder(config);
+ * await responder.init();
+ *
+ * const server = createWebhookServer(responder, config);
+ * await server.start();
+ * ```
+ */
+export function createWebhookServer(responder, config) {
+    return new WebhookServer(responder, config);
+}
+/**
+ * Register signal handlers for graceful shutdown.
+ *
+ * Listens for SIGTERM and SIGINT (Ctrl+C) and gracefully shuts down
+ * the server before exiting.
+ *
+ * @param server - Webhook server to shut down
+ */
+export function registerShutdownHandlers(server) {
+    const shutdown = async (signal) => {
+        console.log(`[webhook-server] Received ${signal}, shutting down gracefully...`);
+        try {
+            await server.stop();
+            process.exit(0);
+        }
+        catch (err) {
+            console.error('[webhook-server] Error during shutdown:', err);
+            process.exit(1);
+        }
+    };
+    process.on('SIGTERM', () => shutdown('SIGTERM'));
+    process.on('SIGINT', () => shutdown('SIGINT'));
+}
+//# sourceMappingURL=server.js.map

package/dist/hooks/github-auto-responder/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/hooks/github-auto-responder/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,IAAmD,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAIjD,sCAAsC;AACtC,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,CAAC;AAElC;;;;;;;;GAQG;AACH,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;YAE1B,IAAI,SAAS,GAAG,aAAa,EAAE,CAAC;gBAC9B,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,aAAa,QAAQ,CAAC,CAAC,CAAC;gBACjE,OAAO;YACT,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,OAAO,aAAa;IAaL;IACA;IAbnB,2BAA2B;IACnB,MAAM,CAAc;IAC5B,8CAA8C;IACtC,OAAO,GAAG,KAAK,CAAC;IAExB;;;;;OAKG;IACH,YACmB,SAAwB,EACxB,MAA2B;QAD3B,cAAS,GAAT,SAAS,CAAe;QACxB,WAAM,GAAN,MAAM,CAAqB;QAE5C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAElC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBACxC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,OAAO,CAAC,GAAG,CACT,kDAAkD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CACrE,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;OAUG;IACK,aAAa,CAAC,GAAoB,EAAE,GAAmB;QAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC;QAE5B,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACnD,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACzC,OAAO,CAAC,KAAK,CAAC,sDAAsD,EAAE,GAAG,CAAC,CAAC;gBAC3E,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;gBAC9D,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,YAAY,CAAC,GAAmB;QACtC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACjD,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACK,KAAK,CAAC,aAAa,CACzB,GAAoB,EACpB,GAAmB;QAEnB,IAAI,CAAC;YACH,4DAA4D;YAC5D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;YAEpC,2BAA2B;YAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAuB,CAAC;YAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC,CAAC;gBACzE,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,eAAe,CAC7B,OAAO,EACP,SAAS,EACT,IAAI,CAAC,MAAM,CAAC,aAAa,CAC1B,CAAC;YAEF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACpD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;gBACxD,OAAO;YACT,CAAC;YAED,6BAA6B;YAC7B,IAAI,OAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAmB,CAAC;YACpE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;gBACrD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YAED,wCAAwC;YACxC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;YACtE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAuB,CAAC;YAE1E,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YAED,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CACT,6BAA6B,SAAS,qBAAqB,UAAU,GAAG,CACzE,CAAC;YAEF,kEAAkE;YAClE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;YAEhD,2DAA2D;YAC3D,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC/D,OAAO,CAAC,KAAK,CACX,6CAA6C,UAAU,GAAG,EAC1D,GAAG,CACJ,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,kDAAkD;YAClD,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,CAAC,CAAC;YAEjE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACxB,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;oBACrB,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;oBAC/C,qDAAqD;oBACrD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAwB,EACxB,MAA2B;IAE3B,OAAO,IAAI,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAqB;IAC5D,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,OAAO,CAAC,GAAG,CAAC,6BAA6B,MAAM,+BAA+B,CAAC,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/hooks/github-auto-responder/signature.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Extracts the HMAC signature from the GitHub webhook signature header.
+ *
+ * @param header - The X-Hub-Signature-256 header value (format: "sha256=...")
+ * @returns The hex digest string if valid, null if malformed or missing
+ *
+ * @example
+ * ```ts
+ * extractSignature("sha256=abc123") // => "abc123"
+ * extractSignature("invalid") // => null
+ * ```
+ */
+export declare function extractSignature(header: string): string | null;
+/**
+ * Verifies a GitHub webhook signature using HMAC-SHA256.
+ *
+ * Uses constant-time comparison to prevent timing attacks.
+ *
+ * @param payload - The raw request body as a Buffer
+ * @param signature - The X-Hub-Signature-256 header value (format: "sha256=...")
+ * @param secret - The webhook secret configured in GitHub
+ * @returns true if signature is valid, false otherwise
+ *
+ * @example
+ * ```ts
+ * const isValid = verifySignature(
+ *   Buffer.from(requestBody),
+ *   req.headers['x-hub-signature-256'],
+ *   process.env.GITHUB_WEBHOOK_SECRET
+ * );
+ * ```
+ */
+export declare function verifySignature(payload: Buffer, signature: string, secret: string): boolean;
+//# sourceMappingURL=signature.d.ts.map

package/dist/hooks/github-auto-responder/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../../src/hooks/github-auto-responder/signature.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiB9D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAmCT"}

package/dist/hooks/github-auto-responder/signature.js

@@ -0,0 +1,79 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+/**
+ * Extracts the HMAC signature from the GitHub webhook signature header.
+ *
+ * @param header - The X-Hub-Signature-256 header value (format: "sha256=...")
+ * @returns The hex digest string if valid, null if malformed or missing
+ *
+ * @example
+ * ```ts
+ * extractSignature("sha256=abc123") // => "abc123"
+ * extractSignature("invalid") // => null
+ * ```
+ */
+export function extractSignature(header) {
+    if (!header || typeof header !== 'string') {
+        return null;
+    }
+    const parts = header.split('=');
+    if (parts.length !== 2 || parts[0] !== 'sha256') {
+        return null;
+    }
+    const digest = parts[1];
+    // Validate hex format (64 chars for SHA256)
+    if (!/^[a-f0-9]{64}$/i.test(digest)) {
+        return null;
+    }
+    return digest;
+}
+/**
+ * Verifies a GitHub webhook signature using HMAC-SHA256.
+ *
+ * Uses constant-time comparison to prevent timing attacks.
+ *
+ * @param payload - The raw request body as a Buffer
+ * @param signature - The X-Hub-Signature-256 header value (format: "sha256=...")
+ * @param secret - The webhook secret configured in GitHub
+ * @returns true if signature is valid, false otherwise
+ *
+ * @example
+ * ```ts
+ * const isValid = verifySignature(
+ *   Buffer.from(requestBody),
+ *   req.headers['x-hub-signature-256'],
+ *   process.env.GITHUB_WEBHOOK_SECRET
+ * );
+ * ```
+ */
+export function verifySignature(payload, signature, secret) {
+    // Validate inputs
+    if (!payload || !Buffer.isBuffer(payload)) {
+        return false;
+    }
+    if (!secret || typeof secret !== 'string') {
+        return false;
+    }
+    // Extract signature from header
+    const expectedDigest = extractSignature(signature);
+    if (!expectedDigest) {
+        return false;
+    }
+    // Compute HMAC-SHA256 of payload
+    const hmac = createHmac('sha256', secret);
+    hmac.update(payload);
+    const actualDigest = hmac.digest('hex');
+    // Constant-time comparison to prevent timing attacks
+    try {
+        const expectedBuffer = Buffer.from(expectedDigest, 'hex');
+        const actualBuffer = Buffer.from(actualDigest, 'hex');
+        if (expectedBuffer.length !== actualBuffer.length) {
+            return false;
+        }
+        return timingSafeEqual(expectedBuffer, actualBuffer);
+    }
+    catch {
+        // Buffer conversion or comparison failed
+        return false;
+    }
+}
+//# sourceMappingURL=signature.js.map

package/dist/hooks/github-auto-responder/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../../src/hooks/github-auto-responder/signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,4CAA4C;IAC5C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,SAAiB,EACjB,MAAc;IAEd,kBAAkB;IAClB,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gCAAgC;IAChC,MAAM,cAAc,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iCAAiC;IACjC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrB,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAExC,qDAAqD;IACrD,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAEtD,IAAI,cAAc,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,eAAe,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/hooks/github-auto-responder/templates.d.ts

@@ -0,0 +1,16 @@
+/**
+ * GitHub Auto Responder Templates
+ *
+ * Static fallback response templates for different issue/PR categories.
+ * These are used when LLM generation is not available or as a basis for LLM-enhanced responses.
+ */
+import type { ResponseCategory, PersonaConfig } from './types.js';
+/**
+ * Get static template for a given response category
+ *
+ * @param category - The category of response needed
+ * @param persona - Persona configuration for customization
+ * @returns Template string with {emoji} placeholder
+ */
+export declare function getTemplate(category: ResponseCategory, persona: PersonaConfig): string;
+//# sourceMappingURL=templates.d.ts.map

package/dist/hooks/github-auto-responder/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/hooks/github-auto-responder/templates.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAElE;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,aAAa,GACrB,MAAM,CAeR"}

package/dist/hooks/github-auto-responder/templates.js

@@ -0,0 +1,93 @@
+/**
+ * GitHub Auto Responder Templates
+ *
+ * Static fallback response templates for different issue/PR categories.
+ * These are used when LLM generation is not available or as a basis for LLM-enhanced responses.
+ */
+/**
+ * Get static template for a given response category
+ *
+ * @param category - The category of response needed
+ * @param persona - Persona configuration for customization
+ * @returns Template string with {emoji} placeholder
+ */
+export function getTemplate(category, persona) {
+    const emoji = persona.signatureEmoji;
+    switch (category) {
+        case 'bug':
+            return getBugReportTemplate(emoji);
+        case 'feature':
+            return getFeatureRequestTemplate(emoji);
+        case 'question':
+            return getQuestionTemplate(emoji);
+        case 'pr':
+            return getPRTemplate(emoji);
+        default:
+            return getGenericTemplate(emoji);
+    }
+}
+/**
+ * Bug report template
+ */
+function getBugReportTemplate(emoji) {
+    return `Thanks for reporting! ${emoji}
+
+To help us fix this faster:
+1. Steps to reproduce
+2. Expected vs actual behavior
+3. OMC version (\`omc --version\`)
+4. OS & Node version
+
+잘 부탁드립니다!`;
+}
+/**
+ * Feature request template
+ */
+function getFeatureRequestTemplate(emoji) {
+    return `Interesting idea! ${emoji}
+
+몇 가지 궁금한 점:
+- What's your use case?
+- Have you tried existing alternatives?
+- How should it integrate with current features?
+
+Thanks for the suggestion!`;
+}
+/**
+ * Question template
+ */
+function getQuestionTemplate(emoji) {
+    return `Thanks for asking! ${emoji}
+
+Check out our docs first: [README](../../README.md)
+If that doesn't help, please share:
+- What you're trying to do
+- What you've tried
+- Error messages (if any)
+
+질문 감사합니다!`;
+}
+/**
+ * Pull request template
+ */
+function getPRTemplate(emoji) {
+    return `Thanks for the PR! ${emoji}
+
+Quick checklist:
+- [ ] Tests added/updated?
+- [ ] Docs updated if needed?
+- [ ] Breaking changes noted?
+
+Will review in detail soon. 감사합니다!`;
+}
+/**
+ * Generic fallback template
+ */
+function getGenericTemplate(emoji) {
+    return `Thanks for your contribution! ${emoji}
+
+We'll take a look and get back to you soon.
+
+감사합니다!`;
+}
+//# sourceMappingURL=templates.js.map

package/dist/hooks/github-auto-responder/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../../src/hooks/github-auto-responder/templates.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,QAA0B,EAC1B,OAAsB;IAEtB,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC;IAErC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,KAAK;YACR,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACrC,KAAK,SAAS;YACZ,OAAO,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAC1C,KAAK,UAAU;YACb,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACpC,KAAK,IAAI;YACP,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;QAC9B;YACE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,yBAAyB,KAAK;;;;;;;;UAQ7B,CAAC;AACX,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAAC,KAAa;IAC9C,OAAO,qBAAqB,KAAK;;;;;;;2BAOR,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,sBAAsB,KAAK;;;;;;;;UAQ1B,CAAC;AACX,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,sBAAsB,KAAK;;;;;;;mCAOD,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,iCAAiC,KAAK;;;;OAIxC,CAAC;AACR,CAAC"}