envai-teams-sdk 1.0.0a1__tar.gz

envai_teams_sdk-1.0.0a1/.github/CODEOWNERS

@@ -0,0 +1,5 @@
+* @lorenzocamporesi
+*.md @lucanori @lorenzocamporesi
+.github/** @lucanori
+release.config.cjs @lucanori
+docs/** @lucanori

envai_teams_sdk-1.0.0a1/.github/RELEASING.md

@@ -0,0 +1,41 @@
+# Releases
+
+CI runs the complete SDK checks before publishing a GitHub release. Pull requests receive read-only validation and never receive release or notification secrets. Pushes to `main`, `alpha`, `beta`, and `dev` are eligible when those branches exist. Branch creation does not change the default branch or branch protections.
+
+## Conventional Commits
+
+- `feat`: minor; `fix`: patch
+- Breaking `feat` or `fix`, declared with `!` or a `BREAKING CHANGE` footer: major
+- `chore`, `refactor`, `build`: patch
+- `ci`, `docs`, `test`, `style`, `perf`: no release
+- Commits containing `[skip ci]`: excluded from release analysis
+
+Semantic Release chooses the highest applicable change since the previous release. Existing `v`-prefixed tags and releases are preserved. `main` produces stable `vX.Y.Z` tags; the other channels produce tags such as `v1.0.0-alpha.1`. An untagged repository starts with Semantic Release's initial version, `1.0.0` on its selected channel. This does not make an alpha release stable.
+
+The manual **Trigger build** workflow creates exactly one empty `chore` commit on the selected releasing branch. The resulting push runs CI and then the ordinary release pipeline. A `chore` trigger is therefore expected to produce a release.
+
+## Existing secrets
+
+- `RELEASE_TOKEN` is required. A missing token fails the release job explicitly. The workflow never falls back to `GITHUB_TOKEN` because that would suppress downstream workflow events.
+- `KCHAT_WEBHOOK_URL` is optional. When configured, the existing webhook receives the repository, tag, commit, run link, and release outcome. Missing configuration is reported as skipped without failing the release. Webhook URLs and token values must never be logged or committed.
+
+Organization-level secrets must include these public repositories in their access policy. A reference in workflow YAML does not prove that a secret is available to a run. CI does not modify security or approval policies.
+
+## Package distribution
+
+GitHub release creation and registry publication are separate. The separately approved PyPI publisher uploads the verified release wheel and source distribution through the configured `pypi` trusted-publishing environment. It can also publish an existing release through manual dispatch. Other registries still require their own verified setup. These workflows do not create accounts or credentials.
+
+- PHP: register `digitalygo/envai-teams-sdk-php` with Packagist, then configure its approved GitHub synchronization. Composer versions follow Git tags.
+- TypeScript: the declared package is `@digitalygo/envai-client`. Verify ownership of the `digitalygo` npm scope and configure an approved npm publisher before enabling registry uploads. GitHub releases include an installable `.tgz` built with the computed release version.
+- Python: the declared PyPI name is `envai-teams-sdk`. The approved trusted publisher is bound to `digitalygo/envai-teams-sdk-python`, workflow `publish-pypi.yml`, environment `pypi`. GitHub releases include wheel and source distributions; `1.0.0-alpha.1` is normalized to Python's `1.0.0a1`.
+- Go: the public module path is `github.com/digitalygo/envai-teams-sdk-go`. Versioned Git tags are the publication mechanism; consumers can request a tag through the public Go module proxy.
+
+TypeScript and Python release preparation commits only the computed package metadata using `chore(release): VERSION [skip ci]`, pushes without force, and then tags that commit. Tagged source archives and uploaded package assets therefore agree on their version. A rejected metadata push fails before creating the tag. Go releases at major version 2 or later require the matching `/vN` suffix in `go.mod` before tagging.
+
+Registry uploads must remain disabled until the intended namespace, owner, authentication and target have been verified. A successful GitHub release alone does not demonstrate a successful npm, PyPI, or Packagist publication.
+
+## Maintenance
+
+Release tooling is isolated under `.github/release-tools` with a committed npm lockfile and lifecycle scripts disabled during installation. CI tests the release policy and audits the dependency graph. Renovate is configured for each repository's actual package managers, with Wednesday 11:00–13:00 Europe/Rome updates and CODEOWNERS reviewers. The configuration requires a Renovate service with access; adding its JSON file alone does not install that service.
+
+These SDK repositories have no production Docker image, so container publication and Swarm deployment are intentionally absent.

envai_teams_sdk-1.0.0a1/.github/release-tools/.gitignore

@@ -0,0 +1 @@
+node_modules/

envai_teams_sdk-1.0.0a1/.github/release-tools/adapters/release-matcher/LICENSE

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2014-present, Jon Schlinkert.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

envai_teams_sdk-1.0.0a1/.github/release-tools/adapters/release-matcher/index.js

@@ -0,0 +1,64 @@
+import picomatch from 'picomatch';
+
+function requireDefaultOptions(options) {
+  if (options !== undefined) {
+    throw new TypeError('Release matching options are unsupported; review the locked consumers before extending this adapter');
+  }
+}
+
+function match(list, patterns, options) {
+  requireDefaultOptions(options);
+  const candidates = [].concat(list);
+  const expressions = [].concat(patterns);
+  const omitted = new Set();
+  const included = new Set();
+  const visited = new Set();
+  let negations = 0;
+
+  for (const expression of expressions) {
+    const matcher = picomatch(String(expression), {
+      onResult: (result) => visited.add(result.output),
+    }, true);
+    const negated = matcher.state.negated || matcher.state.negatedExtglob;
+
+    if (negated) {
+      negations++;
+    }
+
+    for (const candidate of candidates) {
+      const result = matcher(candidate, true);
+      const matched = negated ? !result.isMatch : result.isMatch;
+
+      if (!matched) {
+        continue;
+      }
+
+      if (negated) {
+        omitted.add(result.output);
+      } else {
+        omitted.delete(result.output);
+        included.add(result.output);
+      }
+    }
+  }
+
+  const result = negations === expressions.length ? visited : included;
+
+  return [...result].filter((candidate) => !omitted.has(candidate));
+}
+
+match.isMatch = (value, patterns, options) => {
+  requireDefaultOptions(options);
+
+  return picomatch(patterns)(value);
+};
+
+export default new Proxy(match, {
+  get(target, property, receiver) {
+    if (typeof property === 'symbol' || Reflect.has(target, property)) {
+      return Reflect.get(target, property, receiver);
+    }
+
+    throw new TypeError(`Unsupported release matching API: ${String(property)}`);
+  },
+});

envai_teams_sdk-1.0.0a1/.github/release-tools/adapters/release-matcher/package.json

@@ -0,0 +1,15 @@
+{
+  "name": "@envai-sdk/release-matcher",
+  "version": "1.0.0",
+  "private": true,
+  "description": "Scoped matching API for the locked semantic-release and commit-analyzer consumers",
+  "type": "module",
+  "exports": "./index.js",
+  "license": "MIT",
+  "engines": {
+    "node": ">=24.18.0"
+  },
+  "dependencies": {
+    "picomatch": "2.3.2"
+  }
+}

envai_teams_sdk-1.0.0a1/.github/release-tools/analyze-commits.mjs

@@ -0,0 +1,24 @@
+import { analyzeCommits as analyze } from '@semantic-release/commit-analyzer';
+
+export const parserOpts = {
+  headerPattern: /^(\w*)(?:\((.*)\))?!?: (.*)$/,
+  breakingHeaderPattern: /^(\w*)(?:\((.*)\))?!: (.*)$/,
+  headerCorrespondence: ['type', 'scope', 'subject'],
+  noteKeywords: ['BREAKING CHANGE', 'BREAKING CHANGES'],
+};
+
+export const releaseRules = [
+  { type: '*', release: false },
+  { type: 'feat', release: 'minor' },
+  { type: 'fix', release: 'patch' },
+  { type: 'feat', breaking: true, release: 'major' },
+  { type: 'fix', breaking: true, release: 'major' },
+  ...['chore', 'refactor', 'build'].map(type => ({ type, release: 'patch' })),
+];
+
+export async function analyzeCommits(_, context) {
+  return analyze({ parserOpts, releaseRules }, {
+    ...context,
+    commits: context.commits.filter(commit => !commit.message.includes('[skip ci]')),
+  });
+}

envai_teams_sdk-1.0.0a1/.github/release-tools/node_modules/.bin/conventional-changelog-writer

@@ -0,0 +1 @@
+../conventional-changelog-writer/dist/cli/index.js

envai_teams_sdk-1.0.0a1/.github/release-tools/node_modules/.bin/conventional-commits-parser

@@ -0,0 +1 @@
+../conventional-commits-parser/dist/cli/index.js

envai_teams_sdk-1.0.0a1/.github/release-tools/node_modules/.bin/handlebars

@@ -0,0 +1 @@
+../handlebars/bin/handlebars

envai_teams_sdk-1.0.0a1/.github/release-tools/node_modules/.bin/highlight

@@ -0,0 +1 @@
+../cli-highlight/bin/highlight

envai_teams_sdk-1.0.0a1/.github/release-tools/node_modules/.bin/js-yaml

@@ -0,0 +1 @@
+../js-yaml/bin/js-yaml.js

envai_teams_sdk-1.0.0a1/.github/release-tools/node_modules/.bin/marked

@@ -0,0 +1 @@
+../marked/bin/marked.js

envai_teams_sdk-1.0.0a1/.github/release-tools/node_modules/.bin/mime

@@ -0,0 +1 @@
+../mime/bin/cli.js

envai_teams_sdk-1.0.0a1/.github/release-tools/node_modules/.bin/node-which

@@ -0,0 +1 @@
+../which/bin/node-which

envai_teams_sdk-1.0.0a1/.github/release-tools/node_modules/.bin/semantic-release

@@ -0,0 +1 @@
+../semantic-release/bin/semantic-release.js

envai_teams_sdk-1.0.0a1/.github/release-tools/node_modules/.bin/semver

@@ -0,0 +1 @@
+../semver/bin/semver.js

envai_teams_sdk-1.0.0a1/.github/release-tools/node_modules/.bin/uglifyjs

@@ -0,0 +1 @@
+../uglify-js/bin/uglifyjs