opencode-courier 0.2.3 → 0.3.0

package/dist/webhook.js

@@ -3,7 +3,7 @@ import { readFileSync } from "node:fs";
 import { createServer } from "node:http";
 import { homedir } from "node:os";
 import { addBounded } from "./bounded.js";
-import { num, obj, str } from "./json.js";
+import { isNotFound, num, obj, str } from "./json.js";
 import { CI_EVENTS, envelope, githubSummary, hookSummary, webhookText } from "./notices.js";
 import { scanAll } from "./storage.js";
 const PREFIX = "webhook/";
@@ -14,9 +14,8 @@ const REMEMBERED = 1000;
 const GITHUB_REPO = /^[\w.-]+\/[\w.-]+$/;
 const GENERIC_NAME = /^[\w.-]{1,64}$/;
 /**
- * Normalises a topic: `owner/repo` or `owner/repo#12` (optionally prefixed `github:`) is a GitHub
- * repository or one of its pull requests or issues; any other name of letters, digits, `.`, `_` and
- * `-` is a generic topic, posted to `/hook/<name>`.
+ * Normalises a topic: `owner/repo` or `owner/repo#12` (optionally `github:`-prefixed) is a GitHub
+ * repo, PR or issue; any other name of letters, digits, `.`, `_` and `-` is posted to `/hook/<name>`.
  */
 export function parseTopic(input) {
     const raw = input.trim();
@@ -69,9 +68,8 @@ function hmac(secret, body, name) {
 }
 const SIGNATURE = /^sha256=([0-9a-fA-F]{64})$/;
 /**
- * Checks an `X-Hub-Signature-256` header (`sha256=` and exactly 64 hex digits) in constant time and
- * returns the digest in canonical lowercase hex, or undefined when it does not match. Replays are
- * keyed by that digest, never by the header text, which could be re-cased or padded.
+ * Checks an `X-Hub-Signature-256` header (`sha256=` + 64 hex digits) in constant time, returning the
+ * digest in lowercase hex, or undefined; replays are keyed by that digest, never by the header text.
  */
 export function checkSignature(secret, body, header, name) {
     const hex = header?.match(SIGNATURE)?.[1];
@@ -109,9 +107,8 @@ function numbersOf(name, body) {
     return n === undefined ? [] : [n];
 }
 /**
- * Maps a GitHub delivery to its topics (`github:owner/repo` and, for pull requests and issues,
- * `github:owner/repo#N`) and a summary. Undefined for deliveries nobody should be woken for: pings,
- * CI events that have not completed, and pull request or issue actions outside `ITEM_ACTIONS`.
+ * Maps a GitHub delivery to its topics (`github:owner/repo`, plus `github:owner/repo#N` for PRs and
+ * issues) and a summary; undefined for pings, unfinished CI events and actions outside `ITEM_ACTIONS`.
  */
 export function githubEvent(name, payload) {
     const body = obj(payload);
@@ -143,10 +140,6 @@ export function genericEvent(topic, body) {
     catch { }
     return { source: "hook", name: topic, topics: [topic], summary: hookSummary(text) };
 }
-const isNotFound = (error) => {
-    const tag = error?._tag;
-    return typeof tag === "string" && tag.includes("NotFound");
-};
 /**
  * Delivers an event to every session subscribed to one of its topics, once per session. A session
  * OpenCode no longer knows loses its subscriptions.
@@ -236,9 +229,8 @@ async function deliver(ports, request, event, digest, seen) {
     return { status: 202, body: `delivered to ${delivered} session(s)` };
 }
 /**
- * Handles one request: `POST /github` with GitHub's headers, or `POST /hook/<name>` signed over
- * the name and the body. Anything not signed with the secret is refused before its body is parsed,
- * and a signature already accepted is ignored, so a captured delivery cannot be replayed.
+ * Handles one request: `POST /github` with GitHub's headers, or `POST /hook/<name>` signed over name
+ * and body; anything unsigned is refused before parsing, and a signature already accepted is ignored.
  */
 export async function receive(ports, secret, request, seen = new Set()) {
     const routed = route(request);
@@ -313,9 +305,8 @@ export function listen(config, ports) {
     });
 }
 /**
- * Reads the plugin's `webhook` option. The secret comes from the file named by `secretFile`, or
- * else the environment variable named by `secretEnv` (default `COURIER_WEBHOOK_SECRET`); never from
- * the option itself, so it stays out of opencode.json. Undefined when the receiver is not configured.
+ * Reads the `webhook` option, undefined when the receiver is not configured; the secret comes from
+ * `secretFile` or the env var `secretEnv` (default `COURIER_WEBHOOK_SECRET`), never from the option.
  */
 export function readConfig(options, env = process.env) {
     const option = obj(options).webhook;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-courier",
-  "version": "0.2.3",
+  "version": "0.3.0",
   "description": "Multi-session orchestration for OpenCode V2: spawn child sessions, be woken by them. No polling.",
   "license": "MIT",
   "author": "Ivo Pogace <71701666+ivopogace@users.noreply.github.com>",