pi-ghwebhook 0.0.0-stage → 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,25 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.2.0] - 2026-11-09
+
+### Added
+
+- **Built-in `setup-ghwebhook` Skill**: Packaged an interactive setup skill that auto-detects `gh` CLI credentials, auto-heals missing `cli/gh-webhook` extensions, senses repo workflow and review bot configs, and scaffolds tailored `.pi/ghwebhook.json` rules.
+
+## [0.1.0] - 2026-11-09
+
+### Added
+
+- **Universal Upstream-Aligned Event Bus**: Direct 1-to-1 match with GitHub Webhook wire protocol (`<event>` / `<event>.<action>`), natively supporting all 100+ GitHub events (`workflow_run.completed`, `pull_request.opened`, `push`, `issues.opened`, etc.).
+- **Composable Declarative Filters**: Replaced rigid synthetic code topics with flexible filters (`branch`, `conclusion`, `workflow`, `state`, `senders`, `isBot`, `match`), empowering users to configure any combination of conditions directly in `.pi/ghwebhook.json`.
+- **Official Schema Alignment**: Full type alignment with official `@octokit/openapi-webhooks-types`.
+- **In-Process Loopback Server**: Ephemeral port listener on `127.0.0.1:0` with optional HMAC SHA-256 webhook signature validation.
+- **Full-Event Reverse Tunnel Forwarding**: Managed `gh webhook forward --events=*` subprocess with automatic teardown on `session_shutdown` and `process.exit`.
+- **Template Renderer**: Safe, single-pass $O(N)$ string interpolation engine for prompt synthesis.
+- **Workspace Probing**: Zero-footprint detection of `.pi/ghwebhook.json` and `.agents/ghwebhook.json`.
+- **Tooling & Quality Gates**: Native `mise` and `hk` orchestration with `oxlint`, `tsc`, `prettier`, `lizard` complexity audit, and `jscpd` code duplication gate.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 xifan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,142 @@
-# Temporary Holding Version
+<div align="center">
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+# pi-ghwebhook
+
+**Universal GitHub Webhook event bus and wake-up driver for the Pi coding agent**
+
+[![npm version](https://img.shields.io/npm/v/pi-ghwebhook?logo=npm&logoColor=white)](https://www.npmjs.com/package/pi-ghwebhook)
+[![Node.js](https://img.shields.io/badge/node-%3E%3D22.19.0-339933?logo=nodedotjs&logoColor=white)](https://nodejs.org)
+[![TypeScript](https://img.shields.io/badge/TypeScript-5.8-3178C6?logo=typescript&logoColor=white)](https://www.typescriptlang.org)
+[![Pi Package](https://img.shields.io/badge/pi--package-extension-black)](https://github.com/earendil-works/pi)
+[![GitHub License](https://img.shields.io/github/license/xifan2333/pi-ghwebhook?logo=github&logoColor=white)](LICENSE)
+
+English | [中文](README_zh.md)
+
+</div>
+
+## Overview
+
+pi-ghwebhook eliminates manual polling and terminal switching after pushing code or creating pull requests. By hosting an in-process loopback server connected to GitHub CLI's `gh webhook forward` reverse tunnel, it receives real-time GitHub Webhook events, evaluates GitHub Actions Workflow-style trigger rules, and wakes up the Pi Agent via `pi.sendUserMessage()` to close the loop.
+
+## Key Architecture
+
+- 100% GitHub Actions Workflow Specification: Uses official `on` and `jobs` syntax. Zero invented intermediate concepts.
+- JSON Schema Autocompletion: Includes an official schema (`$schema`) for instant editor IntelliSense and validation.
+- Zero Public Exposure: Uses `gh webhook forward --events=*` local reverse tunnels. No public server, ngrok, or exposed port required.
+- Dynamic Port Allocation: Binds to `127.0.0.1:0`. The OS kernel dynamically assigns an unused port, eliminating port contention across concurrent sessions.
+- Table-Driven Dispatch: O(1) event routing with strict complexity constraints (CCN <= 15, CogC <= 15).
+- Workspace Detection: Probes `.pi/ghwebhook.json` on `session_start`. If absent, sleeps silently with zero resource consumption.
+- Clean Teardown: Hooks into `session_shutdown` and process exit to terminate child processes and servers idempotently.
+
+## Installation
+
+Install into your Pi coding agent:
+
+```bash
+pi install npm:pi-ghwebhook
+```
+
+Or install from GitHub:
+
+```bash
+pi install git:github.com/xifan2333/pi-ghwebhook
+```
+
+To test locally in an active session:
+
+```bash
+pi -e /path/to/pi-ghwebhook
+```
+
+## Configuration (`.pi/ghwebhook.json`)
+
+Place `.pi/ghwebhook.json` in the root of any repository. Point `$schema` to the hosted JSON Schema for auto-completion in VS Code, Cursor, and other editors:
+
+```json
+{
+  "$schema": "https://raw.githubusercontent.com/xifan2333/pi-ghwebhook/main/schemas/ghwebhook.schema.json",
+  "name": "CI & Review Automation",
+  "on": {
+    "workflow_run": {
+      "workflows": ["CI"],
+      "types": ["completed"],
+      "branches": ["@current"]
+    },
+    "pull_request_review": {
+      "types": ["submitted"],
+      "branches": ["@current"]
+    },
+    "issues": {
+      "types": ["opened"]
+    },
+    "push": {
+      "branches": ["main"]
+    }
+  },
+  "jobs": {
+    "ci-failure": {
+      "if": "github.event.workflow_run.conclusion == 'failure'",
+      "prompt": "CI run failed on branch {{ branch }}.\n\nRun URL: {{ run_url }}\nCommit: {{ head_sha }}\n\nPlease run `gh run view {{ run_id }} --log-failed` to diagnose the error and prepare a fix.",
+      "deliverAs": "followUp"
+    },
+    "ci-success": {
+      "if": "github.event.workflow_run.conclusion == 'success'",
+      "prompt": "Remote CI has passed on branch {{ branch }}.\n\nRun URL: {{ run_url }}\n\nPlease check PR checks status and verify if it is ready to merge.",
+      "deliverAs": "followUp"
+    },
+    "review-bot": {
+      "if": "github.event.review.user.type == 'Bot'",
+      "prompt": "Received review comments from {{ sender }}:\n\nState: {{ review_state }}\nDetails:\n{{ review_body }}\n\nPlease evaluate these comments critically: triage true issues to fix, and refute false positives.",
+      "deliverAs": "steer"
+    },
+    "new-issue": {
+      "prompt": "New issue opened #{{ issue_number }}: {{ issue_title }}\n\n{{ issue_body }}"
+    },
+    "push-main": {
+      "prompt": "New commit pushed to main: {{ head_sha }} - {{ commit_message }}"
+    }
+  }
+}
+```
+
+### Configuration Fields
+
+- `name`: Optional workflow name.
+- `repo`: GitHub repository (`owner/repo`). Defaults to `"auto"` (resolved from `git remote get-url origin`).
+- `secret`: Optional webhook HMAC SHA-256 verification secret.
+- `on`: GitHub Actions event triggers specification:
+  - `<event_name>`: Event name (e.g. `workflow_run`, `pull_request`, `push`, `issues`).
+  - `types`: Activity types filtering `payload.action` (e.g. `["completed"]`, `["opened"]`).
+  - `branches`: Branches filter supporting `@current` and globs (e.g. `["@current", "main", "feat/*"]`).
+  - `workflows`: Workflow names filter (e.g. `["CI"]`).
+- `jobs`: Map of jobs to execute:
+  - `if`: Conditional expression (e.g. `github.event.workflow_run.conclusion == 'failure'`).
+  - `prompt`: Prompt template sent to Pi Agent.
+  - `deliverAs`: Pi message delivery mode: `"followUp"` (default) or `"steer"`.
+
+### Template Variables
+
+- `{{ branch }}`: Current head branch.
+- `{{ head_sha }}`: Commit SHA.
+- `{{ commit_message }}`: Head commit message.
+- `{{ repo }}` / `{{ repo_url }}`: Repository name and URL.
+- `{{ run_id }}` / `{{ run_url }}` / `{{ workflow }}` / `{{ conclusion }}`: Workflow run metadata.
+- `{{ pr_number }}` / `{{ pr_title }}` / `{{ pr_url }}`: Pull request details.
+- `{{ issue_number }}` / `{{ issue_title }}` / `{{ issue_url }}` / `{{ issue_body }}`: Issue details.
+- `{{ sender }}` / `{{ sender_type }}`: Triggering actor.
+- `{{ review_state }}` / `{{ review_body }}` / `{{ review_url }}`: Review details.
+- `{{ comment_body }}` / `{{ comment_url }}`: Comment details.
+
+## Development & Quality Gates
+
+```bash
+mise run check         # Run all quality gates (tsc, oxlint, prettier, lizard, jscpd, typos)
+mise run check:plan    # Preview execution plan
+mise run check:changed # Check only staged/modified files (< 50ms)
+mise run fix           # Auto-format and fix lint/package issues
+mise run test          # Run test suite
+```
+
+## License
+
+[MIT](LICENSE) © 2026 xifan

package/README_zh.md

@@ -0,0 +1,142 @@
+<div align="center">
+
+# pi-ghwebhook
+
+**适用于 Pi coding agent 的通用 GitHub Webhook 事件总线与自动唤醒驱动**
+
+[![npm version](https://img.shields.io/npm/v/pi-ghwebhook?logo=npm&logoColor=white)](https://www.npmjs.com/package/pi-ghwebhook)
+[![Node.js](https://img.shields.io/badge/node-%3E%3D22.19.0-339933?logo=nodedotjs&logoColor=white)](https://nodejs.org)
+[![TypeScript](https://img.shields.io/badge/TypeScript-5.8-3178C6?logo=typescript&logoColor=white)](https://www.typescriptlang.org)
+[![Pi Package](https://img.shields.io/badge/pi--package-extension-black)](https://github.com/earendil-works/pi)
+[![GitHub License](https://img.shields.io/github/license/xifan2333/pi-ghwebhook?logo=github&logoColor=white)](LICENSE)
+
+[English](README.md) | 简体中文
+
+</div>
+
+## 概述
+
+pi-ghwebhook 旨在彻底消除提交代码或创建 Pull Request 后的人工轮询与终端反复切换。通过在进程内运行回环 HTTP 服务并托管 GitHub CLI 的 `gh webhook forward` 反向长连接隧道，它可以实时接收 GitHub Webhook 事件，依据 GitHub Actions Workflow 官方规范解析规则，并通过 `pi.sendUserMessage()` 主动唤醒 Pi Agent 进入闭环处置。
+
+## 核心架构特性
+
+- 100% 对齐 GitHub Actions Workflow 官方规范：完全采用官方标准的 `on` 触发器与 `jobs` 任务语法，零中间层生造概念。
+- JSON Schema 智能提示：提供官方 Schema（`$schema`），在 VS Code、Cursor 等现代编辑器中编写即享全字段类型补全与静态校验。
+- 零公网暴露：依托 `gh webhook forward --events=*` 反向隧道，无需公网服务器、固定 IP 或内网穿透工具。
+- 动态端口分配：监听 `127.0.0.1:0`，由操作系统内核动态分配空闲端口，杜绝多终端或多会话并发运行时的端口冲突。
+- 表驱动分发：基于哈希表实现 O(1) 路由分发，执行严格的复杂度门禁（CCN <= 15, CogC <= 15）。
+- 工作区自感知：在 `session_start` 生命周期探测 `.pi/ghwebhook.json`，无配置时静默休眠，零资源占用。
+- 幂等清理保障：深度绑定 `session_shutdown` 与进程退出钩子，确保子进程与本地服务干净释放，不留孤儿进程。
+
+## 安装
+
+安装到 Pi coding agent：
+
+```bash
+pi install npm:pi-ghwebhook
+```
+
+或直接通过 GitHub 仓库安装：
+
+```bash
+pi install git:github.com/xifan2333/pi-ghwebhook
+```
+
+在当前会话中即时测试：
+
+```bash
+pi -e /path/to/pi-ghwebhook
+```
+
+## 配置契约 (`.pi/ghwebhook.json`)
+
+在仓库根目录下创建 `.pi/ghwebhook.json`。配置 `$schema` 即可享受现代 IDE 的实时悬浮提示与自动补全：
+
+```json
+{
+  "$schema": "https://raw.githubusercontent.com/xifan2333/pi-ghwebhook/main/schemas/ghwebhook.schema.json",
+  "name": "CI & Review Automation",
+  "on": {
+    "workflow_run": {
+      "workflows": ["CI"],
+      "types": ["completed"],
+      "branches": ["@current"]
+    },
+    "pull_request_review": {
+      "types": ["submitted"],
+      "branches": ["@current"]
+    },
+    "issues": {
+      "types": ["opened"]
+    },
+    "push": {
+      "branches": ["main"]
+    }
+  },
+  "jobs": {
+    "ci-failure": {
+      "if": "github.event.workflow_run.conclusion == 'failure'",
+      "prompt": "分支 {{ branch }} 的 CI 运行失败。\n\n运行链接: {{ run_url }}\n提交哈希: {{ head_sha }}\n\n请使用 `gh run view {{ run_id }} --log-failed` 查看失败日志并进行修复。",
+      "deliverAs": "followUp"
+    },
+    "ci-success": {
+      "if": "github.event.workflow_run.conclusion == 'success'",
+      "prompt": "分支 {{ branch }} 的远程 CI 已全部通过。\n\n运行链接: {{ run_url }}\n\n请检查 PR 状态并确认是否准备合入。",
+      "deliverAs": "followUp"
+    },
+    "review-bot": {
+      "if": "github.event.review.user.type == 'Bot'",
+      "prompt": "收到来自 {{ sender }} 的审查意见：\n\n状态: {{ review_state }}\n详情:\n{{ review_body }}\n\n请批判性评估上述审查意见：修复真实问题，驳回误报。",
+      "deliverAs": "steer"
+    },
+    "new-issue": {
+      "prompt": "收到新 Issue #{{ issue_number }}: {{ issue_title }}\n\n{{ issue_body }}"
+    },
+    "push-main": {
+      "prompt": "main 分支收到新代码推送: {{ head_sha }} - {{ commit_message }}"
+    }
+  }
+}
+```
+
+### 字段说明
+
+- `name`: 可选的工作流名称。
+- `repo`: GitHub 仓库名（`owner/repo`）。默认为 `"auto"`（自动从 `git remote get-url origin` 提取）。
+- `secret`: 可选的 Webhook HMAC SHA-256 鉴权密钥。
+- `on`: GitHub Actions 事件触发器配置：
+  - `<event_name>`: 官方事件名称（如 `workflow_run`, `pull_request`, `push`, `issues`）。
+  - `types`: 官方活动类型过滤 `payload.action`（如 `["completed"]`, `["opened"]`）。
+  - `branches`: 分支过滤，支持 `@current` 动态分支与 glob（如 `["@current", "main", "feat/*"]`）。
+  - `workflows`: 工作流过滤（如 `["CI"]`）。
+- `jobs`: 触发时执行的任务字典：
+  - `if`: 表达式条件（如 `github.event.workflow_run.conclusion == 'failure'`）。
+  - `prompt`: 传给 Pi Agent 的提示词内容模板。
+  - `deliverAs`: Pi 消息投递模式：`"followUp"`（默认排队执行）或 `"steer"`（实时插话打断）。
+
+### 模板插值变量
+
+- `{{ branch }}`: 分支名称
+- `{{ head_sha }}`: 触发提交哈希
+- `{{ commit_message }}`: 提交日志
+- `{{ repo }}` / `{{ repo_url }}`: 仓库名及网页链接
+- `{{ run_id }}` / `{{ run_url }}` / `{{ workflow }}` / `{{ conclusion }}`: 工作流运行元数据
+- `{{ pr_number }}` / `{{ pr_title }}` / `{{ pr_url }}`: PR 详情
+- `{{ issue_number }}` / `{{ issue_title }}` / `{{ issue_url }}` / `{{ issue_body }}`: Issue 详情
+- `{{ sender }}` / `{{ sender_type }}`: 触发人或机器人
+- `{{ review_state }}` / `{{ review_body }}` / `{{ review_url }}`: 评审详情
+- `{{ comment_body }}` / `{{ comment_url }}`: 评论详情
+
+## 开发与质量门禁
+
+```bash
+mise run check         # 执行全量质量检查（tsc, oxlint, prettier, lizard, jscpd, typos）
+mise run check:plan    # 预览执行计划
+mise run check:changed # 增量检查暂存区及修改文件 (< 50ms)
+mise run fix           # 自动格式化并修复问题
+mise run test          # 运行测试套件
+```
+
+## 许可证
+
+[MIT](LICENSE) © 2026 xifan

package/dist/bus/event-bus.d.ts

@@ -0,0 +1,14 @@
+import type { GhWebhookWorkflow } from "../types/schema.js";
+import type { WebhookPayload } from "../types/payload.js";
+export interface ActionPlan {
+    prompt: string;
+    deliverAs: "steer" | "followUp";
+    jobId: string;
+}
+export declare class WebhookEventBus {
+    private readonly workflow;
+    constructor(workflow: GhWebhookWorkflow);
+    private getTriggerForEvent;
+    dispatch(incomingEvent: string, payload: WebhookPayload, currentBranch: string): ActionPlan[];
+}
+//# sourceMappingURL=event-bus.d.ts.map

package/dist/bus/event-bus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-bus.d.ts","sourceRoot":"","sources":["../../src/bus/event-bus.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAsB,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAI1D,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,GAAG,UAAU,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,iBAAiB;IAExD,OAAO,CAAC,kBAAkB;IAkB1B,QAAQ,CACN,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,cAAc,EACvB,aAAa,EAAE,MAAM,GACpB,UAAU,EAAE;CA2BhB"}

package/dist/bus/event-bus.js

@@ -0,0 +1,46 @@
+import { isTriggerMatched, evaluateCondition } from "./matcher.js";
+import { extractVariables, renderTemplate } from "../template/renderer.js";
+export class WebhookEventBus {
+    workflow;
+    constructor(workflow) {
+        this.workflow = workflow;
+    }
+    getTriggerForEvent(incomingEvent) {
+        const on = this.workflow.on;
+        if (typeof on === "string") {
+            return on === incomingEvent ? null : undefined;
+        }
+        if (Array.isArray(on)) {
+            return on.includes(incomingEvent) ? null : undefined;
+        }
+        if (typeof on === "object" && on !== null) {
+            if (Object.prototype.hasOwnProperty.call(on, incomingEvent)) {
+                return on[incomingEvent];
+            }
+        }
+        return undefined;
+    }
+    dispatch(incomingEvent, payload, currentBranch) {
+        const trigger = this.getTriggerForEvent(incomingEvent);
+        if (trigger === undefined) {
+            return [];
+        }
+        if (!isTriggerMatched(trigger, payload, currentBranch)) {
+            return [];
+        }
+        const vars = extractVariables(payload, currentBranch);
+        const plans = [];
+        for (const [jobId, job] of Object.entries(this.workflow.jobs)) {
+            if (!evaluateCondition(job.if, payload, currentBranch)) {
+                continue;
+            }
+            plans.push({
+                prompt: renderTemplate(job.prompt, vars),
+                deliverAs: job.deliverAs ?? "followUp",
+                jobId,
+            });
+        }
+        return plans;
+    }
+}
+//# sourceMappingURL=event-bus.js.map

package/dist/bus/event-bus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-bus.js","sourceRoot":"","sources":["../../src/bus/event-bus.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAQ3E,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,QAA2B;QAA3B,aAAQ,GAAR,QAAQ,CAAmB;IAAG,CAAC;IAEpD,kBAAkB,CACxB,aAAqB;QAErB,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC3B,OAAO,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACjD,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;gBAC5D,OAAO,EAAE,CAAC,aAAa,CAA8B,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,QAAQ,CACN,aAAqB,EACrB,OAAuB,EACvB,aAAqB;QAErB,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QACvD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,CAAC;YACvD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,gBAAgB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACtD,MAAM,KAAK,GAAiB,EAAE,CAAC;QAE/B,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,CAAC;gBACvD,SAAS;YACX,CAAC;YAED,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;gBACxC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,UAAU;gBACtC,KAAK;aACN,CAAC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/bus/guards.d.ts

@@ -0,0 +1,10 @@
+import type { WebhookPayload } from "../types/payload.js";
+import type { FilterConfig } from "../types/schema.js";
+export interface FilterContext {
+    currentBranch: string;
+    payload: WebhookPayload;
+}
+export type GuardPredicate = (expectedValue: unknown, ctx: FilterContext) => boolean;
+export declare const GUARDS: ReadonlyMap<keyof FilterConfig, GuardPredicate>;
+export declare function evaluateGuards(filters: FilterConfig | undefined, ctx: FilterContext): boolean;
+//# sourceMappingURL=guards.d.ts.map

package/dist/bus/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../src/bus/guards.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;CACzB;AAED,MAAM,MAAM,cAAc,GAAG,CAC3B,aAAa,EAAE,OAAO,EACtB,GAAG,EAAE,aAAa,KACf,OAAO,CAAC;AAiFb,eAAO,MAAM,MAAM,EAAE,WAAW,CAAC,MAAM,YAAY,EAAE,cAAc,CAQjE,CAAC;AAEH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,YAAY,GAAG,SAAS,EACjC,GAAG,EAAE,aAAa,GACjB,OAAO,CAYT"}

package/dist/bus/guards.js

@@ -0,0 +1,88 @@
+function resolvePayloadBranch(payload) {
+    return (payload.workflow_run?.head_branch ??
+        payload.pull_request?.head?.ref ??
+        payload.check_suite?.head_branch ??
+        payload.workflow_job?.head_branch ??
+        (typeof payload.ref === "string"
+            ? payload.ref.replace("refs/heads/", "")
+            : undefined));
+}
+function resolvePayloadSender(payload) {
+    return (payload.sender?.login ??
+        payload.review?.user?.login ??
+        payload.comment?.user?.login);
+}
+function getNestedValue(obj, path) {
+    const parts = path.split(".");
+    let current = obj;
+    for (const part of parts) {
+        if (current == null || typeof current !== "object")
+            return undefined;
+        current = current[part];
+    }
+    return current;
+}
+const branchGuard = (expected, { currentBranch, payload }) => {
+    const target = expected === "@current" ? currentBranch : expected;
+    const actualBranch = resolvePayloadBranch(payload);
+    return typeof target === "string" && actualBranch === target;
+};
+const conclusionGuard = (expected, { payload }) => {
+    const actual = payload.workflow_run?.conclusion ??
+        payload.check_suite?.conclusion ??
+        payload.workflow_job?.conclusion;
+    return typeof expected === "string" && actual === expected;
+};
+const workflowGuard = (expected, { payload }) => {
+    const workflowName = payload.workflow_run?.name ?? payload.workflow_job?.workflow_name;
+    return typeof expected === "string" && workflowName === expected;
+};
+const stateGuard = (expected, { payload }) => {
+    const actual = payload.review?.state ?? payload.pull_request?.state;
+    return typeof expected === "string" && actual === expected;
+};
+const sendersGuard = (allowedList, { payload }) => {
+    if (!Array.isArray(allowedList))
+        return true;
+    const sender = resolvePayloadSender(payload);
+    return typeof sender === "string" && allowedList.includes(sender);
+};
+const isBotGuard = (expected, { payload }) => {
+    const senderType = payload.review?.user?.type ?? payload.sender?.type;
+    const login = payload.review?.user?.login ?? payload.sender?.login ?? "";
+    const isBot = senderType === "Bot" || login.endsWith("[bot]");
+    return isBot === Boolean(expected);
+};
+const matchGuard = (matchObj, { payload }) => {
+    if (!matchObj || typeof matchObj !== "object")
+        return true;
+    for (const [path, expected] of Object.entries(matchObj)) {
+        const actual = getNestedValue(payload, path);
+        if (actual !== expected)
+            return false;
+    }
+    return true;
+};
+export const GUARDS = new Map([
+    ["branch", branchGuard],
+    ["conclusion", conclusionGuard],
+    ["workflow", workflowGuard],
+    ["state", stateGuard],
+    ["senders", sendersGuard],
+    ["isBot", isBotGuard],
+    ["match", matchGuard],
+]);
+export function evaluateGuards(filters, ctx) {
+    if (!filters)
+        return true;
+    for (const [key, value] of Object.entries(filters)) {
+        if (value === undefined)
+            continue;
+        const guard = GUARDS.get(key);
+        if (guard && !guard(value, ctx)) {
+            return false;
+        }
+    }
+    return true;
+}
+//# sourceMappingURL=guards.js.map

package/dist/bus/guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../../src/bus/guards.ts"],"names":[],"mappings":"AAaA,SAAS,oBAAoB,CAAC,OAAuB;IACnD,OAAO,CACL,OAAO,CAAC,YAAY,EAAE,WAAW;QACjC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG;QAC/B,OAAO,CAAC,WAAW,EAAE,WAAW;QAChC,OAAO,CAAC,YAAY,EAAE,WAAW;QACjC,CAAC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAC9B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;YACxC,CAAC,CAAC,SAAS,CAAC,CACf,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAuB;IACnD,OAAO,CACL,OAAO,CAAC,MAAM,EAAE,KAAK;QACrB,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK;QAC3B,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAC7B,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,GAAwB,EAAE,IAAY;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAQ,GAAG,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACrE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,WAAW,GAAmB,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE;IAC3E,MAAM,MAAM,GAAG,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClE,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,YAAY,KAAK,MAAM,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,eAAe,GAAmB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IAChE,MAAM,MAAM,GACV,OAAO,CAAC,YAAY,EAAE,UAAU;QAChC,OAAO,CAAC,WAAW,EAAE,UAAU;QAC/B,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC;IACnC,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,aAAa,GAAmB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IAC9D,MAAM,YAAY,GAChB,OAAO,CAAC,YAAY,EAAE,IAAI,IAAI,OAAO,CAAC,YAAY,EAAE,aAAa,CAAC;IACpE,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,YAAY,KAAK,QAAQ,CAAC;AACnE,CAAC,CAAC;AAEF,MAAM,UAAU,GAAmB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC;IACpE,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,YAAY,GAAmB,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,UAAU,GAAmB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;IACzE,MAAM,KAAK,GAAG,UAAU,KAAK,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9D,OAAO,KAAK,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AACrC,CAAC,CAAC;AAEF,MAAM,UAAU,GAAmB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IAC3D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAC3C,QAAmC,CACpC,EAAE,CAAC;QACF,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAoD,IAAI,GAAG,CAAC;IAC7E,CAAC,QAAQ,EAAE,WAAW,CAAC;IACvB,CAAC,YAAY,EAAE,eAAe,CAAC;IAC/B,CAAC,UAAU,EAAE,aAAa,CAAC;IAC3B,CAAC,OAAO,EAAE,UAAU,CAAC;IACrB,CAAC,SAAS,EAAE,YAAY,CAAC;IACzB,CAAC,OAAO,EAAE,UAAU,CAAC;IACrB,CAAC,OAAO,EAAE,UAAU,CAAC;CACtB,CAAC,CAAC;AAEH,MAAM,UAAU,cAAc,CAC5B,OAAiC,EACjC,GAAkB;IAElB,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAyB,CAAC,CAAC;QACpD,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/bus/matcher.d.ts

@@ -0,0 +1,7 @@
+import type { WebhookPayload } from "../types/payload.js";
+import type { EventTriggerConfig } from "../types/schema.js";
+export declare function globMatch(pattern: string, text: string): boolean;
+export declare function resolvePayloadBranch(payload: WebhookPayload): string | undefined;
+export declare function isTriggerMatched(trigger: EventTriggerConfig | null | undefined, payload: WebhookPayload, currentBranch: string): boolean;
+export declare function evaluateCondition(expr: string | undefined, payload: WebhookPayload, currentBranch: string): boolean;
+//# sourceMappingURL=matcher.d.ts.map

package/dist/bus/matcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matcher.d.ts","sourceRoot":"","sources":["../../src/bus/matcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAQhE;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,cAAc,GACtB,MAAM,GAAG,SAAS,CAUpB;AA8CD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,kBAAkB,GAAG,IAAI,GAAG,SAAS,EAC9C,OAAO,EAAE,cAAc,EACvB,aAAa,EAAE,MAAM,GACpB,OAAO,CAOT;AAmDD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,OAAO,EAAE,cAAc,EACvB,aAAa,EAAE,MAAM,GACpB,OAAO,CA0BT"}

package/dist/bus/matcher.js

@@ -0,0 +1,122 @@
+export function globMatch(pattern, text) {
+    if (pattern === text || pattern === "*")
+        return true;
+    const escaped = pattern
+        .replace(/[.+^${}()|[\]\\]/g, "\\$&")
+        .replace(/\*\*/g, ".*")
+        .replace(/\*/g, ".*");
+    const regex = new RegExp(`^${escaped}$`);
+    return regex.test(text);
+}
+export function resolvePayloadBranch(payload) {
+    return (payload.workflow_run?.head_branch ??
+        payload.pull_request?.head?.ref ??
+        payload.check_suite?.head_branch ??
+        payload.workflow_job?.head_branch ??
+        (typeof payload.ref === "string"
+            ? payload.ref.replace("refs/heads/", "")
+            : undefined));
+}
+function matchBranches(branches, actualBranch, currentBranch) {
+    for (const pattern of branches) {
+        if (pattern === "@current" && actualBranch === currentBranch) {
+            return true;
+        }
+        if (globMatch(pattern, actualBranch)) {
+            return true;
+        }
+    }
+    return false;
+}
+function matchTypes(types, action) {
+    if (!Array.isArray(types) || types.length === 0)
+        return true;
+    const actionStr = typeof action === "string" ? action : "";
+    return types.includes(actionStr);
+}
+function matchBranchFilter(branches, payload, currentBranch) {
+    if (!Array.isArray(branches) || branches.length === 0)
+        return true;
+    const actualBranch = resolvePayloadBranch(payload);
+    return Boolean(actualBranch && matchBranches(branches, actualBranch, currentBranch));
+}
+function matchWorkflows(workflows, payload) {
+    if (!Array.isArray(workflows) || workflows.length === 0)
+        return true;
+    const workflowName = payload.workflow_run?.name ?? payload.workflow_job?.workflow_name ?? "";
+    return workflows.some((w) => globMatch(w, workflowName));
+}
+export function isTriggerMatched(trigger, payload, currentBranch) {
+    if (!trigger)
+        return true;
+    return (matchTypes(trigger.types, payload.action) &&
+        matchBranchFilter(trigger.branches, payload, currentBranch) &&
+        matchWorkflows(trigger.workflows, payload));
+}
+function getNestedValue(obj, path) {
+    const parts = path.split(".");
+    let current = obj;
+    for (const part of parts) {
+        if (current == null || typeof current !== "object")
+            return undefined;
+        current = current[part];
+    }
+    return current;
+}
+function resolveContextValue(path, payload, currentBranch) {
+    const cleanPath = path
+        .replace(/^github\.event\./, "")
+        .replace(/^event\./, "")
+        .trim();
+    // Special shortcuts
+    if (cleanPath === "branch")
+        return resolvePayloadBranch(payload) ?? currentBranch;
+    if (cleanPath === "conclusion")
+        return payload.workflow_run?.conclusion ?? payload.check_suite?.conclusion;
+    if (cleanPath === "sender")
+        return payload.sender?.login ?? payload.review?.user?.login;
+    if (cleanPath === "isBot") {
+        const senderType = payload.review?.user?.type ?? payload.sender?.type;
+        const login = payload.review?.user?.login ?? payload.sender?.login ?? "";
+        return senderType === "Bot" || login.endsWith("[bot]");
+    }
+    return getNestedValue(payload, cleanPath);
+}
+function parseLiteral(literal) {
+    const trimmed = literal.trim();
+    if (trimmed === "true")
+        return true;
+    if (trimmed === "false")
+        return false;
+    if (trimmed === "null")
+        return null;
+    if (/^['"].*['"]$/.test(trimmed)) {
+        return trimmed.slice(1, -1);
+    }
+    const num = Number(trimmed);
+    if (!Number.isNaN(num))
+        return num;
+    return trimmed;
+}
+export function evaluateCondition(expr, payload, currentBranch) {
+    if (!expr || !expr.trim())
+        return true;
+    const match = expr.match(/^(.+?)\s*(===|!==|==|!=)\s*(.+)$/);
+    if (!match) {
+        const val = resolveContextValue(expr.trim(), payload, currentBranch);
+        return Boolean(val);
+    }
+    const [, leftRaw, op, rightRaw] = match;
+    const leftVal = resolveContextValue(leftRaw.trim(), payload, currentBranch);
+    const rightVal = parseLiteral(rightRaw.trim());
+    const isEqualOp = op === "==" || op === "===";
+    if (typeof rightVal === "string" &&
+        typeof leftVal === "string" &&
+        rightVal.includes("*")) {
+        const matchesGlob = globMatch(rightVal, leftVal);
+        return isEqualOp ? matchesGlob : !matchesGlob;
+    }
+    const areEqual = leftVal === rightVal;
+    return isEqualOp ? areEqual : !areEqual;
+}
+//# sourceMappingURL=matcher.js.map