Feature/initial sdk

.gitattributes

@@ -0,0 +1,3 @@
+# The ncc bundle is build output that has to be committed for GitHub to run it.
+# Keep it out of diffs and out of the language stats.
+dist/** -diff linguist-generated=true

.github/workflows/ci.yml

@@ -0,0 +1,62 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  check:
+    name: Node ${{ matrix.node }}
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        node: [20, 22]
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node }}
+          cache: npm
+
+      - run: npm ci
+
+      - run: npm run lint
+      - run: npm run format:check
+      - run: npm run typecheck
+      - run: npm test
+
+  bundle:
+    name: dist is current
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      # Pinned to one version on purpose: the committed bundle has to be
+      # byte-identical to what this job produces, and that only holds when
+      # everyone builds on the same toolchain.
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+
+      - run: npm ci
+      - run: npm run build
+
+      - name: Fail if dist/ is stale
+        run: |
+          if ! git diff --exit-code --stat -- dist/; then
+            echo "::error::dist/ is out of date. Run \`npm run build\` and commit the result."
+            exit 1
+          fi
+          echo "dist/ matches the source."

.github/workflows/release.yml

@@ -0,0 +1,71 @@
+name: Release
+
+# Tag the commit `v<version>` matching package.json, e.g. v0.1.0.
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+concurrency:
+  group: release
+  cancel-in-progress: false
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: npm
+
+      - run: npm ci
+
+      - name: Verify tag matches package version
+        if: startsWith(github.ref, 'refs/tags/v')
+        run: |
+          TAG="${GITHUB_REF_NAME#v}"
+          VERSION=$(node -p "require('./package.json').version")
+          [ "$VERSION" = "$TAG" ] || { echo "::error::package.json is $VERSION but tag is $TAG"; exit 1; }
+
+      - run: npm run lint
+      - run: npm run typecheck
+      - run: npm test
+
+      # A release that ships a stale bundle ships the previous version's code.
+      - name: Verify the committed bundle is current
+        run: |
+          npm run build
+          if ! git diff --exit-code --stat -- dist/; then
+            echo "::error::dist/ does not match the source on this ref. Rebuild, commit, and re-tag."
+            exit 1
+          fi
+
+      - name: Create the GitHub Release
+        if: startsWith(github.ref, 'refs/tags/v')
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh release create "$GITHUB_REF_NAME" \
+            --title "$GITHUB_REF_NAME" \
+            --generate-notes \
+            --verify-tag
+
+      # Consumers pin `fopost/fopost-github-action@v0`, so the floating major
+      # tag has to follow every release on that major. A lightweight tag needs
+      # no committer identity.
+      - name: Move the major version tag
+        if: startsWith(github.ref, 'refs/tags/v')
+        run: |
+          MAJOR="${GITHUB_REF_NAME%%.*}"
+          git tag -f "$MAJOR" "$GITHUB_SHA"
+          git push --force origin "refs/tags/$MAJOR"
+          echo "$MAJOR now points at $GITHUB_SHA"

.github/workflows/self-test.yml

@@ -0,0 +1,86 @@
+name: Self test
+
+# Runs the committed bundle against itself in dry-run mode, so every change is
+# exercised end to end: inputs parse, the account list resolves, outputs are
+# set, and the job summary renders. No live key and no mutating call.
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  dry-run:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Post release notes (dry run)
+        id: fopost
+        uses: ./
+        with:
+          # A placeholder key is enough: a dry run never reaches a mutating
+          # endpoint, and the read it attempts degrades to the ids as given.
+          api-key: ${{ secrets.FOPOST_API_KEY || 'placeholder-key-for-dry-run' }}
+          workspace-id: 00000000-0000-4000-8000-000000000000
+          accounts: |
+            00000000-0000-4000-8000-000000000001
+            00000000-0000-4000-8000-000000000002
+          text: |
+            ${{ github.repository }} built ${{ github.sha }}.
+            This is the FoPost action exercising itself.
+          labels: ci, self-test
+          publish: true
+          dry-run: true
+
+      - name: Assert the dry run set its outputs
+        run: |
+          test "${{ steps.fopost.outputs.status }}" = "dry-run"
+          test -z "${{ steps.fopost.outputs.post-id }}"
+          test "${{ steps.fopost.outputs.delivery-count }}" = "0"
+
+      - name: Post from a file (dry run)
+        id: from-file
+        uses: ./
+        with:
+          api-key: ${{ secrets.FOPOST_API_KEY || 'placeholder-key-for-dry-run' }}
+          workspace-id: 00000000-0000-4000-8000-000000000000
+          accounts: 00000000-0000-4000-8000-000000000001
+          text-file: README.md
+          schedule-at: '2099-01-01T09:00:00Z'
+          dry-run: true
+
+      - name: Assert the file was read
+        run: test "${{ steps.from-file.outputs.status }}" = "dry-run"
+
+      - name: A bad input fails the step
+        id: bad
+        continue-on-error: true
+        uses: ./
+        with:
+          api-key: placeholder-key-for-dry-run
+          accounts: 00000000-0000-4000-8000-000000000001
+          status: scheduled
+          text: missing a schedule-at
+          dry-run: true
+
+      - name: Assert it failed
+        run: test "${{ steps.bad.outcome }}" = "failure"
+
+      - name: fail-on-error false keeps the job green
+        id: soft
+        uses: ./
+        with:
+          api-key: placeholder-key-for-dry-run
+          accounts: 00000000-0000-4000-8000-000000000001
+          text: missing a schedule-at
+          status: scheduled
+          fail-on-error: false
+          dry-run: true
+
+      - name: Assert it warned instead
+        run: test "${{ steps.soft.outputs.status }}" = "error"

.prettierignore

@@ -0,0 +1,4 @@
+dist/
+node_modules/
+coverage/
+package-lock.json

.prettierrc

@@ -0,0 +1,7 @@
+{
+  "semi": true,
+  "singleQuote": true,
+  "trailingComma": "all",
+  "printWidth": 100,
+  "tabWidth": 2
+}