@angelmsger/fx 0.10.1 → 0.11.0

package/CHANGELOG.md

@@ -2,6 +2,62 @@
 
 ## [Unreleased]
 
+## 0.11.0 (2026-10-12)
+
+### Added
+
+- Keep a `go.work` at the workspace root when the manifest sets `go.workspace: true`.
+  `fx init` and `fx sync` list every selected checkout that has a `go.mod` at the
+  newest `go` version they require, so each module builds against its siblings'
+  checkouts. A repository not cloned yet is left out, fx replaces or removes only
+  the `go.work` it wrote, and `fx sync --only go` refreshes it alone. `go.work` and
+  `go.work.sum` no longer count as stray root entries in such a workspace.
+- Bind a workspace to GitHub. The `github` code-host provider and the
+  `github-actions` ci provider both drive the GitHub CLI `gh`, which joins the
+  tool catalog with one sign-in per host for both. `fx release check` reads
+  branches, commits, files and the last workflow run of a branch from GitHub just
+  as it does from Bitbucket and Jenkins; a ci environment can narrow the runs it
+  counts to one branch and one trigger. Opening pull requests through fx is not
+  available on GitHub yet.
+
+### Changed
+
+- Rename `fx release` to `fx release check`, so the name says it checks a release
+  rather than making one. `fx release` keeps working as a compatibility name.
+- Say what each release would ship. `fx release check` opens each repository with
+  the version its target branch declares, the head commits of both branches and how
+  many commits on the source branch are not merged into the target yet, by how many
+  people; repositories whose checks all passed close the output one line each with the
+  same. JSON reports gain `repos[]` with these facts, summaries included; every
+  existing field is unchanged.
+- Name the commit a CI build is judged against, say "not merged into main" and "not
+  merged back into dev" in the merge check, and use each platform's own name for the
+  job or project in CI and error messages. CI evidence gains `head`.
+- Show a repository's `release.note` in the release report, as the manifest schema
+  describes.
+
+### Fixed
+
+- Resolve every relative link in the source AGENTS.md that names a file of the
+  manifest source, such as `CONTRIBUTING.md`, in the guide derived at the
+  workspace root. Only links into `README.md`, `docs/` and `skills/` resolved
+  before, so the others pointed at files the root does not have.
+- Stop `fx manifest lint` from asking for a code-host provider when every
+  repository names its `upstream`, since such a workspace reaches no code host.
+- Pass every argument intact to a companion that Windows starts through a batch
+  file (`.cmd`, as npm, Scoop and Chocolatey install them). cmd.exe no longer
+  interprets characters such as `&`, `|`, `%` or `^` in an argument.
+- Read a local Git remote given as a Windows path, such as `C:\host\fx\api.git`,
+  as project and name, so import, adoption, forks and `fx source push` work with it.
+  Manifest documents are named with forward slashes in stdin bundles and source
+  contributions on every platform, and import writes repository paths with them.
+- Stop the PowerShell hook from writing task results into the agent's context,
+  passing fx its input with a byte order mark, and writing progress records to
+  stderr.
+- Link source files with forward slashes in guides derived on Windows, and report
+  the bundled tools catalog in `fx self info` as a file path, also when the install
+  path contains spaces.
+
 ## 0.10.1 (2026-10-12)
 
 ### Added

package/README.md

@@ -118,7 +118,7 @@ For everyday updates use `fx sync`; `fx status` shows repository state. To work
 | List capabilities              | `fx can`                                              |
 | Check a capability             | `fx can <capability> --env <environment>`             |
 | Refresh guides and Skills      | `fx sync --only docs,skills`                          |
-| Inspect release checks         | `fx release --format json`                            |
+| Check what is ready to release | `fx release check`                                    |
 
 Use `repo list`, `env list`, `agent list` and `tool list` to discover valid names.
 Use `repo select` and `env select` to choose an exact set, `--all` to follow the
@@ -126,7 +126,8 @@ team's full set including future additions, or `--none` to select nothing.
 `pick/unpick` add or remove individual names. First-time setup can limit cloning
 with `fx init ./work --from <manifest-repository> --repos example-api,example-web --dry-run`.
 `where` prints coordinates and commands; it does not execute those commands.
-`release` reports on your repositories; it does not publish packages or deploy them.
+`release check` shows what each repository would release and whether it is ready; it
+never publishes or deploys.
 The [CLI reference](docs/cli/README.md) and `fx <command> --help` own exact syntax.
 
 ## For coding agents
@@ -143,12 +144,10 @@ pending writes; inspect them before retrying.
 step fails. Read those results alongside stderr errors before retrying; the
 [user guide](docs/user-guide.md) describes the result and recovery fields.
 
-`init`, `sync`, `doctor` and `release` summarize JSON by default. Use `--details`
-for full results or `--fields` to select fields from those results in any output
-format. Explicit projection emits one report object in JSON/NDJSON and selected
-key/value pairs in human output. Keep stdout
-separate from diagnostic stderr. Do not repeat a write just to obtain a different
-view of its output.
+`init`, `sync`, `doctor` and `release check` summarize JSON by default; the
+[user guide](docs/user-guide.md#for-coding-agents) explains the full and projected
+views. Keep stdout separate from diagnostic stderr. Do not repeat a write just to
+obtain a different view of its output.
 
 For `init`, `sync` and `doctor`, read `preparation.state` and the scoped blockers.
 Incomplete preparation exits 12; continuation is `fx init --resume --workspace <name>`.

package/defaults/tools.yaml

@@ -46,6 +46,15 @@ tools:
     desc: Issues, comments, transitions and worklogs in Jira
     install: [{ via: npm, spec: '@angelmsger/jira-cli' }]
     docs: https://github.com/AngelMsger/jira-cli
+  - name: gh
+    min_version: '2.50.0'
+    desc: Repositories, branches and Actions runs on GitHub
+    install:
+      - { via: brew, spec: gh }
+      - { via: manual }
+    skill: { command: [] }
+    auth: { command: [auth, status] }
+    docs: https://cli.github.com/
   - name: sentry
     min_version: '0.44.1'
     desc: Issues, events and releases in Sentry

package/dist/adapters/ci/github-actions/ci.js

@@ -0,0 +1,95 @@
+// GitHub Actions through gh: a job is one workflow of one repository, narrowed to the
+// runs of one branch and one trigger when the coordinate names them. One workflow often
+// runs on pushes, pull requests and by hand, and only the coordinate knows which of
+// those builds what ships. A workflow that is not there is an answer (undefined), a
+// workflow that cannot be read is an error.
+import { EXIT, objectOf, queryFailed, stringAt, unreadableError } from '../../family/cli.js';
+import { BINARY, GhCli, qualifiedRepository } from '../../github/gh.js';
+import { TemplatePlatform } from '../../platform/template-platform.js';
+export const ID = 'github-actions';
+const QUERY = { timeoutMs: 15_000 };
+const RUNS = ['run', 'list', '--repo', '{repository}', '--workflow', '{workflow}'];
+const FIELDS = 'number,status,conclusion,startedAt,createdAt,url';
+// A run still on its way, by gh's status; a finished run says how it ended instead.
+const PENDING = new Set(['queued', 'in_progress', 'waiting', 'requested', 'pending']);
+const CONCLUSIONS = {
+    success: 'success',
+    failure: 'failure',
+    timed_out: 'failure',
+    startup_failure: 'failure',
+    cancelled: 'aborted',
+    skipped: 'not_built',
+};
+export class GitHubActionsCi {
+    process;
+    id = ID;
+    capability = 'ci';
+    platform = new TemplatePlatform({
+        id: ID,
+        capability: 'ci',
+        label: 'GitHub Actions workflow {workflow} in {repository}',
+        optionalFlags: { branch: '--branch', event: '--event' },
+        command: [BINARY, ...RUNS],
+        probe: { label: 'workflow {workflow} in {repository}', command: [BINARY, ...RUNS] },
+    });
+    constructor(process) {
+        this.process = process;
+    }
+    locate(vars) {
+        return this.platform.locate(qualified(vars));
+    }
+    probe(vars) {
+        return this.platform.probe(qualified(vars));
+    }
+    async lastBuild(vars) {
+        const { repository = '', workflow = '', branch, event } = qualified(vars);
+        const what = `the last run of ${workflow} in ${repository}${branch ? ` on ${branch}` : ''}`;
+        const call = await new GhCli(this.process).call([
+            'run',
+            'list',
+            '--repo',
+            repository,
+            '--workflow',
+            workflow,
+            ...(branch ? ['--branch', branch] : []),
+            ...(event ? ['--event', event] : []),
+            '--limit',
+            '1',
+            '--json',
+            FIELDS,
+        ], QUERY);
+        if (call.code === EXIT.not_found)
+            return undefined;
+        if (call.code !== 0 || !Array.isArray(call.data))
+            throw queryFailed(BINARY, call, `read ${what}`);
+        // A workflow that never ran on that branch has no build to judge.
+        if (call.data.length === 0)
+            return undefined;
+        const run = objectOf(call.data[0]);
+        if (run === undefined || typeof run['number'] !== 'number')
+            throw unreadableError(BINARY, what);
+        return {
+            number: run['number'],
+            status: statusOf(run),
+            startedAt: stringAt(run, 'startedAt') ?? stringAt(run, 'createdAt') ?? null,
+            url: stringAt(run, 'url') ?? null,
+        };
+    }
+}
+// Every command, run or printed, names the repository's host, so GH_HOST cannot send
+// it elsewhere.
+function qualified(vars) {
+    const { repository } = vars;
+    return repository === undefined
+        ? vars
+        : { ...vars, repository: qualifiedRepository(repository).repository };
+}
+function statusOf(run) {
+    const status = stringAt(run, 'status') ?? '';
+    if (PENDING.has(status))
+        return 'building';
+    if (status !== 'completed')
+        return 'unknown';
+    return CONCLUSIONS[stringAt(run, 'conclusion') ?? ''] ?? 'unknown';
+}
+//# sourceMappingURL=ci.js.map

package/dist/adapters/ci/github-actions/ci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci.js","sourceRoot":"","sources":["../../../../src/adapters/ci/github-actions/ci.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,wFAAwF;AACxF,oFAAoF;AACpF,oFAAoF;AACpF,4CAA4C;AAM5C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAEvE,MAAM,CAAC,MAAM,EAAE,GAAG,gBAAgB,CAAC;AACnC,MAAM,KAAK,GAAG,EAAE,SAAS,EAAE,MAAM,EAAW,CAAC;AAC7C,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AACnF,MAAM,MAAM,GAAG,kDAAkD,CAAC;AAElE,oFAAoF;AACpF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AACtF,MAAM,WAAW,GAA0C;IACzD,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,SAAS;IACpB,eAAe,EAAE,SAAS;IAC1B,SAAS,EAAE,SAAS;IACpB,OAAO,EAAE,WAAW;CACrB,CAAC;AAEF,MAAM,OAAO,eAAe;IAYG;IAXpB,EAAE,GAAG,EAAE,CAAC;IACR,UAAU,GAAG,IAAa,CAAC;IACnB,QAAQ,GAAG,IAAI,gBAAgB,CAAC;QAC/C,EAAE,EAAE,EAAE;QACN,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,oDAAoD;QAC3D,aAAa,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE;QACvD,OAAO,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;QAC1B,KAAK,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE;KACpF,CAAC,CAAC;IAEH,YAA6B,OAAgB;QAAhB,YAAO,GAAP,OAAO,CAAS;IAAG,CAAC;IAEjD,MAAM,CAAC,IAAU;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,IAAU;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAU;QACxB,MAAM,EAAE,UAAU,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,mBAAmB,QAAQ,OAAO,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC5F,MAAM,IAAI,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAC7C;YACE,KAAK;YACL,MAAM;YACN,QAAQ;YACR,UAAU;YACV,YAAY;YACZ,QAAQ;YACR,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,SAAS;YACT,GAAG;YACH,QAAQ;YACR,MAAM;SACP,EACD,KAAK,CACN,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACnD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9C,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;QAClD,kEAAkE;QAClE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ;YAAE,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChG,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC;YACrB,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC;YACrB,SAAS,EAAE,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,IAAI;YAC3E,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI;SAClC,CAAC;IACJ,CAAC;CACF;AAED,qFAAqF;AACrF,gBAAgB;AAChB,SAAS,SAAS,CAAC,IAAU;IAC3B,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC5B,OAAO,UAAU,KAAK,SAAS;QAC7B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,mBAAmB,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,QAAQ,CAAC,GAA4B;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IAC3C,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IAC7C,OAAO,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,SAAS,CAAC;AACrE,CAAC"}

package/dist/adapters/ci/github-actions/provider.js

@@ -0,0 +1,33 @@
+// GitHub Actions through gh: one sign-in, shared with the github code host; each
+// environment names the workflow, branch and trigger that build it.
+import { BINARY, GH_RECIPES, qualifiedRepository } from '../../github/gh.js';
+import { GitHubActionsCi, ID } from './ci.js';
+export const githubActionsProvider = {
+    id: ID,
+    capability: 'ci',
+    tools: [BINARY],
+    recipes: GH_RECIPES,
+    vars: [
+        {
+            name: 'repository',
+            desc: '[HOST/]OWNER/NAME of the repository the workflows live in (github.com without a host), may use {repo}',
+            required: true,
+        },
+    ],
+    envVars: [
+        { name: 'workflow', desc: 'workflow file name or name, e.g. ci.yml', required: true },
+        {
+            name: 'branch',
+            desc: 'only runs of this branch; without it, the latest run on any branch',
+            required: false,
+        },
+        {
+            name: 'event',
+            desc: 'only runs this trigger started, e.g. push; without it, any trigger',
+            required: false,
+        },
+    ],
+    recipeVars: (vars) => ({ hostname: qualifiedRepository(vars['repository'] ?? '').hostname }),
+    create: (deps) => new GitHubActionsCi(deps.process),
+};
+//# sourceMappingURL=provider.js.map

package/dist/adapters/ci/github-actions/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../../src/adapters/ci/github-actions/provider.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,oEAAoE;AAIpE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE7E,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAE9C,MAAM,CAAC,MAAM,qBAAqB,GAA2B;IAC3D,EAAE,EAAE,EAAE;IACN,UAAU,EAAE,IAAI;IAChB,KAAK,EAAE,CAAC,MAAM,CAAC;IACf,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE;QACJ;YACE,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,uGAAuG;YAC7G,QAAQ,EAAE,IAAI;SACf;KACF;IACD,OAAO,EAAE;QACP,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,yCAAyC,EAAE,QAAQ,EAAE,IAAI,EAAE;QACrF;YACE,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,oEAAoE;YAC1E,QAAQ,EAAE,KAAK;SAChB;QACD;YACE,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,oEAAoE;YAC1E,QAAQ,EAAE,KAAK;SAChB;KACF;IACD,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5F,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;CACpD,CAAC"}

package/dist/adapters/code-host/github/provider.js

@@ -0,0 +1,207 @@
+// GitHub as the code host, through gh. Branches, ranges, commits and files come from
+// the REST API by way of `gh api`, so gh holds the credential and fx never sees it.
+// Pull requests are not wired yet: contribution workflows report this host as
+// unsupported instead of half-working.
+import { DevkitError } from '../../../domain/errors.js';
+import { repoUrl } from '../../../domain/workspace/ref.js';
+import { EXIT, objectOf, queryFailed, stringAt, unreadableError } from '../../family/cli.js';
+import { BINARY, DEFAULT_HOSTNAME, GH_RECIPES, GhCli, jsonLines, } from '../../github/gh.js';
+const QUERY = { timeoutMs: 15_000 };
+// The fields of a commit the release check reads, so a commit's diff never crosses the pipe.
+const COMMIT = '{sha, author: .commit.author.name, date: .commit.committer.date, message: .commit.message, parents: [.parents[].sha]}';
+export class GitHubCodeHost {
+    vars;
+    supportsContributions = false;
+    gh;
+    constructor(deps, vars) {
+        this.vars = vars;
+        this.gh = new GhCli(deps.process);
+    }
+    async repositoryIdentity(_ref) {
+        throw contributionUnsupported();
+    }
+    async pullRequest(_input) {
+        throw contributionUnsupported();
+    }
+    async createPullRequest(_input) {
+        throw contributionUnsupported();
+    }
+    async whoami() {
+        const call = await this.api('user', ['--jq', '.login'], { timeoutMs: 5000 });
+        const user = call.stdout.trim();
+        if (call.code !== 0 || user === '')
+            throw queryFailed(BINARY, call, 'tell who is signed in');
+        return { user };
+    }
+    async canRead(ref) {
+        const call = await this.api(`repos/${slug(ref)}`, ['--jq', '.full_name'], { timeoutMs: 5000 });
+        if (call.code === 0)
+            return 'readable';
+        if (call.code === EXIT.permission)
+            return 'forbidden';
+        // GitHub answers 404 for a private repository the person cannot see, too.
+        if (call.code === EXIT.not_found)
+            return 'missing';
+        return 'unknown';
+    }
+    async fork(ref) {
+        const { user } = await this.whoami();
+        const url = this.forkUrl(user, ref);
+        const existing = await this.api(`repos/${user}/${ref.name}`, ['--jq', '{fork, parent: .parent.full_name, source: .source.full_name}'], QUERY);
+        if (existing.code === 0) {
+            // Being a fork does not say of which repository: only one forked from this
+            // upstream, or from a fork whose network starts at it, can carry its pull requests.
+            const found = objectOf(existing.data) ?? {};
+            const of = [stringAt(found, 'parent'), stringAt(found, 'source')];
+            if (of.some((name) => name?.toLowerCase() === slug(ref).toLowerCase()))
+                return { url, created: false };
+            // A repository of that name that is not this fork would make gh pick another name.
+            throw forkFailed(ref, found['fork'] === true
+                ? `${user}/${ref.name} is a fork of ${of[0] ?? 'another repository'}`
+                : `${user}/${ref.name} exists and is not a fork`);
+        }
+        const call = await this.gh.call(['repo', 'fork', `${this.hostname}/${slug(ref)}`, '--clone=false', '--remote=false'], QUERY);
+        if (call.code !== 0)
+            throw forkFailed(ref, call.error?.message ?? `exit ${call.code}`);
+        return { url, created: true };
+    }
+    async branches(ref) {
+        const [list, repo] = await Promise.all([
+            this.api(`repos/${slug(ref)}/branches?per_page=100`, [
+                '--paginate',
+                '--jq',
+                '.[] | {name, sha: .commit.sha}',
+            ]),
+            this.api(`repos/${slug(ref)}`, ['--jq', '.default_branch']),
+        ]);
+        if (list.code !== 0)
+            throw queryFailed(BINARY, list, `list the branches of ${slug(ref)}`);
+        if (repo.code !== 0)
+            throw queryFailed(BINARY, repo, `read the default branch of ${slug(ref)}`);
+        const defaultBranch = repo.stdout.trim();
+        return records(list, `the branches of ${slug(ref)}`).map((item) => {
+            const name = stringAt(item, 'name');
+            const sha = stringAt(item, 'sha');
+            if (name === undefined || sha === undefined)
+                throw unreadableError(BINARY, `a branch of ${slug(ref)}`);
+            return { name, sha, default: name === defaultBranch };
+        });
+    }
+    // Every page, checked against the total GitHub states: a list shorter than the range
+    // would read as branches that agree.
+    async compare(ref, range) {
+        const what = `${range.from}..${range.to} of ${slug(ref)}`;
+        const call = await this.api(`repos/${slug(ref)}/compare/${refPath(range.from)}...${refPath(range.to)}?per_page=100`, ['--paginate', '--jq', `{total: .total_commits, commits: [.commits[] | ${COMMIT}]}`]);
+        if (call.code !== 0)
+            throw queryFailed(BINARY, call, `compare ${what}`);
+        const pages = records(call, what);
+        const commits = pages.flatMap((page) => Array.isArray(page['commits']) ? page['commits'].map(objectOf) : [undefined]);
+        const total = pages[0]?.['total'];
+        if (typeof total !== 'number' || commits.length !== total)
+            throw unreadableError(BINARY, `an incomplete list of the commits in ${what}`);
+        return commits.map((item) => {
+            const commit = item === undefined ? undefined : commitOf(item);
+            if (commit === undefined)
+                throw unreadableError(BINARY, `a commit of ${what}`);
+            return commit;
+        });
+    }
+    async commit(ref, sha) {
+        const call = await this.api(`repos/${slug(ref)}/commits/${refPath(sha)}`, ['--jq', COMMIT]);
+        const commit = call.code === 0 ? commitOf(objectOf(call.data) ?? {}) : undefined;
+        if (commit === undefined)
+            throw queryFailed(BINARY, call, `read commit ${sha} of ${slug(ref)}`);
+        return commit;
+    }
+    async readFile(ref, path, at) {
+        const call = await this.api(`repos/${slug(ref)}/contents/${refPath(path)}?ref=${encodeURIComponent(at)}`, ['-H', 'Accept: application/vnd.github.raw']);
+        if (call.code === 0)
+            return call.stdout;
+        if (call.code === EXIT.not_found)
+            return undefined;
+        throw queryFailed(BINARY, call, `read ${path} at ${at} of ${slug(ref)}`);
+    }
+    upstreamUrl(ref) {
+        return repoUrl(this.host, ref.project, ref.name);
+    }
+    forkUrl(user, ref) {
+        return repoUrl(this.host, user, ref.name);
+    }
+    webUrl(ref) {
+        return `https://${this.hostname}/${slug(ref)}`;
+    }
+    // gh signs in per host and would otherwise pick one from GH_HOST or its configuration,
+    // so every call names the host the binding names, github.com included.
+    api(path, args, options = QUERY) {
+        return this.gh.call(['api', '--hostname', this.hostname, ...args, path], options);
+    }
+    get host() {
+        return this.vars['host'] ?? '';
+    }
+    get hostname() {
+        return hostnameOf(this.host);
+    }
+}
+export const githubProvider = {
+    id: 'github',
+    capability: 'code-host',
+    tools: [BINARY],
+    recipes: GH_RECIPES,
+    vars: [
+        {
+            name: 'host',
+            desc: 'git clone prefix, e.g. https://github.com, or an ssh:// prefix for SSH clones',
+            required: true,
+        },
+    ],
+    recipeVars: (vars) => ({ hostname: hostnameOf(vars['host'] ?? '') }),
+    create: (deps, vars) => new GitHubCodeHost(deps, vars),
+};
+// An https:// or an ssh:// clone prefix names its host; anything else means github.com.
+function hostnameOf(host) {
+    try {
+        return new URL(host).hostname || DEFAULT_HOSTNAME;
+    }
+    catch {
+        return DEFAULT_HOSTNAME;
+    }
+}
+function records(call, what) {
+    const rows = jsonLines(call.stdout)?.map(objectOf);
+    if (rows === undefined || rows.some((row) => row === undefined))
+        throw unreadableError(BINARY, what);
+    return rows;
+}
+function slug(ref) {
+    return `${ref.project}/${ref.name}`;
+}
+// A branch or path keeps its slashes; anything else that means something in a URL is escaped.
+function refPath(value) {
+    return value.split('/').map(encodeURIComponent).join('/');
+}
+function commitOf(item) {
+    const sha = stringAt(item, 'sha');
+    const date = stringAt(item, 'date');
+    if (sha === undefined || date === undefined)
+        return undefined;
+    const parents = Array.isArray(item['parents'])
+        ? item['parents'].filter((p) => typeof p === 'string')
+        : [];
+    return {
+        sha,
+        author: stringAt(item, 'author') ?? '',
+        date,
+        message: stringAt(item, 'message') ?? '',
+        parents,
+    };
+}
+function forkFailed(ref, reason) {
+    return new DevkitError('permission', 'FORK_FAILED', `${BINARY} could not fork ${slug(ref)}: ${reason}`, {
+        hint: 'Forking needs read access to the repository and a free name in your account.',
+        nextSteps: [`${BINARY} repo view ${slug(ref)}`, 'fx repo list --unreadable'],
+    });
+}
+function contributionUnsupported() {
+    return new DevkitError('config', 'SOURCE_CONTRIBUTION_UNSUPPORTED', 'The github code host does not open pull requests through fx yet', { nextSteps: ['Open the pull request with gh pr create.'] });
+}
+//# sourceMappingURL=provider.js.map

package/dist/adapters/code-host/github/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../../src/adapters/code-host/github/provider.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,oFAAoF;AACpF,8EAA8E;AAC9E,uCAAuC;AAQvC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAW3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EACL,MAAM,EACN,gBAAgB,EAChB,UAAU,EACV,KAAK,EACL,SAAS,GAGV,MAAM,oBAAoB,CAAC;AAE5B,MAAM,KAAK,GAAG,EAAE,SAAS,EAAE,MAAM,EAAW,CAAC;AAC7C,6FAA6F;AAC7F,MAAM,MAAM,GACV,uHAAuH,CAAC;AAE1H,MAAM,OAAO,cAAc;IAMN;IALV,qBAAqB,GAAG,KAAK,CAAC;IACtB,EAAE,CAAQ;IAE3B,YACE,IAAiB,EACA,IAAU;QAAV,SAAI,GAAJ,IAAI,CAAM;QAE3B,IAAI,CAAC,EAAE,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,IAAa;QACpC,MAAM,uBAAuB,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAyB;QACzC,MAAM,uBAAuB,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAyB;QAC/C,MAAM,uBAAuB,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC;QAC7F,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAY;QACxB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;QACvC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU;YAAE,OAAO,WAAW,CAAC;QACtD,0EAA0E;QAC1E,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACnD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAY;QACrB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAC7B,SAAS,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,EAC3B,CAAC,MAAM,EAAE,8DAA8D,CAAC,EACxE,KAAK,CACN,CAAC;QACF,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACxB,2EAA2E;YAC3E,oFAAoF;YACpF,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5C,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YAClE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;gBACpE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACjC,mFAAmF;YACnF,MAAM,UAAU,CACd,GAAG,EACH,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI;gBACpB,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,oBAAoB,EAAE;gBACrE,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,2BAA2B,CACnD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAC7B,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,eAAe,EAAE,gBAAgB,CAAC,EACpF,KAAK,CACN,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACvF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAY;QACzB,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE;gBACnD,YAAY;gBACZ,MAAM;gBACN,gCAAgC;aACjC,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;SAC5D,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,wBAAwB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1F,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,8BAA8B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,IAAI,EAAE,mBAAmB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;gBACzC,MAAM,eAAe,CAAC,MAAM,EAAE,eAAe,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,qFAAqF;IACrF,qCAAqC;IACrC,KAAK,CAAC,OAAO,CAAC,GAAY,EAAE,KAAkB;QAC5C,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CACzB,SAAS,IAAI,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,EACvF,CAAC,YAAY,EAAE,MAAM,EAAE,kDAAkD,MAAM,IAAI,CAAC,CACrF,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACrC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAC7E,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;YACvD,MAAM,eAAe,CAAC,MAAM,EAAE,wCAAwC,IAAI,EAAE,CAAC,CAAC;QAChF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAC1B,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/D,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,eAAe,CAAC,MAAM,EAAE,eAAe,IAAI,EAAE,CAAC,CAAC;YAC/E,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAY,EAAE,GAAW;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAY,EAAE,IAAY,EAAE,EAAU;QACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CACzB,SAAS,IAAI,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,IAAI,CAAC,QAAQ,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAC5E,CAAC,IAAI,EAAE,oCAAoC,CAAC,CAC7C,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACxC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACnD,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,OAAO,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,WAAW,CAAC,GAAY;QACtB,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,CAAC,IAAY,EAAE,GAAY;QAChC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,CAAC,GAAY;QACjB,OAAO,WAAW,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,uFAAuF;IACvF,uEAAuE;IAC/D,GAAG,CACT,IAAY,EACZ,IAAuB,EACvB,UAAyB,KAAK;QAE9B,OAAO,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACpF,CAAC;IAED,IAAY,IAAI;QACd,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAED,IAAY,QAAQ;QAClB,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,cAAc,GAAiC;IAC1D,EAAE,EAAE,QAAQ;IACZ,UAAU,EAAE,WAAW;IACvB,KAAK,EAAE,CAAC,MAAM,CAAC;IACf,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE;QACJ;YACE,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,+EAA+E;YACrF,QAAQ,EAAE,IAAI;SACf;KACF;IACD,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IACpE,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC;CACvD,CAAC;AAEF,wFAAwF;AACxF,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,gBAAgB,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,gBAAgB,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAa,EAAE,IAAY;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC;QAC7D,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,IAAiC,CAAC;AAC3C,CAAC;AAED,SAAS,IAAI,CAAC,GAAY;IACxB,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,8FAA8F;AAC9F,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,QAAQ,CAAC,IAA6B;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QACnE,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,GAAG;QACH,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;QACtC,IAAI;QACJ,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE;QACxC,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAY,EAAE,MAAc;IAC9C,OAAO,IAAI,WAAW,CACpB,YAAY,EACZ,aAAa,EACb,GAAG,MAAM,mBAAmB,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,EAClD;QACE,IAAI,EAAE,8EAA8E;QACpF,SAAS,EAAE,CAAC,GAAG,MAAM,cAAc,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,2BAA2B,CAAC;KAC7E,CACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB;IAC9B,OAAO,IAAI,WAAW,CACpB,QAAQ,EACR,iCAAiC,EACjC,iEAAiE,EACjE,EAAE,SAAS,EAAE,CAAC,0CAA0C,CAAC,EAAE,CAC5D,CAAC;AACJ,CAAC"}

package/dist/adapters/github/gh.js

@@ -0,0 +1,103 @@
+// gh, the GitHub CLI, serves two providers: the github code host and GitHub Actions
+// ci. This is the one place that runs it. gh reports a failed request as an HTTP
+// status on stderr, so a failure is translated into the family's exit categories and
+// classified by the same `queryFailed` every companion's failures go through.
+import { stderrReason } from '../../domain/toolchain/stderr.js';
+import { EXIT, toolMissing } from '../family/cli.js';
+export const BINARY = 'gh';
+export const DEFAULT_HOSTNAME = 'github.com';
+// gh signs in per host, so the step is per host too: a binding names its host through
+// `hostname` (see `recipeVars`), the same host from both providers is planned once, and
+// two hosts are two steps. Only the active account of that host is checked, the one gh
+// will use.
+export const GH_RECIPES = [
+    {
+        id: 'login-{hostname}',
+        tool: BINARY,
+        perEnv: false,
+        kind: 'run',
+        phase: 'authenticate',
+        title: 'Log in to GitHub at {hostname}',
+        instructions: 'Signs gh in through the browser or with a token. fx reads repositories and Actions runs with that sign-in; private repositories need the repo scope gh asks for by default.',
+        run: ['auth', 'login', '--hostname', '{hostname}'],
+        verify: { command: ['auth', 'status', '--active', '--hostname', '{hostname}'] },
+    },
+];
+// gh's own [HOST/]OWNER/NAME. Left without a host, gh would pick one from GH_HOST or
+// its configuration, so a bare OWNER/NAME is spelled out as github.com's.
+export function qualifiedRepository(repository) {
+    const parts = repository.split('/');
+    if (parts.length > 2)
+        return { hostname: parts[0] ?? DEFAULT_HOSTNAME, repository };
+    return { hostname: DEFAULT_HOSTNAME, repository: `${DEFAULT_HOSTNAME}/${repository}` };
+}
+export class GhCli {
+    process;
+    constructor(process) {
+        this.process = process;
+    }
+    async call(args, options = {}) {
+        const result = await this.process.run([BINARY, ...args], {
+            timeoutMs: options.timeoutMs,
+            diagnostic: { phase: `${BINARY} ${args.slice(0, 2).join(' ')}`.trim() },
+        });
+        if (result.notStarted === true || result.code === EXIT.missing_binary)
+            throw toolMissing(BINARY);
+        if (result.code === 0)
+            return { code: 0, stdout: result.stdout, data: parse(result.stdout), error: undefined };
+        const status = httpStatus(result.stderr);
+        const message = stderrReason(result.stderr, result.code).replace(/^gh: /, '');
+        return {
+            code: exitOf(result.code, status, message),
+            stdout: result.stdout,
+            data: undefined,
+            error: { message, ...(status === undefined ? {} : { http_status: status }) },
+        };
+    }
+}
+// `--paginate --jq` prints one JSON value per line. A line that does not parse makes
+// the whole answer unreadable rather than shorter.
+export function jsonLines(text) {
+    const values = [];
+    for (const line of text.split('\n')) {
+        if (line.trim() === '')
+            continue;
+        const value = parse(line);
+        if (value === undefined)
+            return undefined;
+        values.push(value);
+    }
+    return values;
+}
+// `gh api` ends its message with "(HTTP 404)"; other commands open it with "HTTP 404:".
+function httpStatus(stderr) {
+    const match = /\(HTTP (\d{3})\)|^HTTP (\d{3}):/m.exec(stderr);
+    const status = match?.[1] ?? match?.[2];
+    return status === undefined ? undefined : Number(status);
+}
+// gh's own exit 4 means it holds no credential at all. Any other failure is a plain
+// failure: gh's remaining codes (cancelled, pending checks) would read as categories.
+function exitOf(code, status, message) {
+    if (code === 4 || status === 401)
+        return EXIT.auth;
+    if (status === 429 || (status === 403 && /rate limit/i.test(message)))
+        return EXIT.rate_limit;
+    if (status === 403)
+        return EXIT.permission;
+    if (status === 404)
+        return EXIT.not_found;
+    if (status !== undefined && status >= 500)
+        return EXIT.server;
+    if (/error connecting to/i.test(message))
+        return EXIT.network;
+    return 1;
+}
+function parse(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=gh.js.map

package/dist/adapters/github/gh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gh.js","sourceRoot":"","sources":["../../../src/adapters/github/gh.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,iFAAiF;AACjF,qFAAqF;AACrF,8EAA8E;AAG9E,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAEhE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAgB,MAAM,kBAAkB,CAAC;AAEnE,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC;AAI3B,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAY,CAAC;AAE7C,sFAAsF;AACtF,wFAAwF;AACxF,uFAAuF;AACvF,YAAY;AACZ,MAAM,CAAC,MAAM,UAAU,GAA2B;IAChD;QACE,EAAE,EAAE,kBAAkB;QACtB,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,gCAAgC;QACvC,YAAY,EACV,6KAA6K;QAC/K,GAAG,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC;QAClD,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE;KAChF;CACF,CAAC;AAEF,qFAAqF;AACrF,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IAIpD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,gBAAgB,EAAE,UAAU,EAAE,CAAC;IACpF,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,gBAAgB,IAAI,UAAU,EAAE,EAAE,CAAC;AACzF,CAAC;AAMD,MAAM,OAAO,KAAK;IACa;IAA7B,YAA6B,OAAgB;QAAhB,YAAO,GAAP,OAAO,CAAS;IAAG,CAAC;IAEjD,KAAK,CAAC,IAAI,CAAC,IAAuB,EAAE,UAAyB,EAAE;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE;YACvD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE;SACxE,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,cAAc;YACnE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC1F,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9E,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC;YAC1C,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE;SAC7E,CAAC;IACJ,CAAC;CACF;AAED,qFAAqF;AACrF,mDAAmD;AACnD,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wFAAwF;AACxF,SAAS,UAAU,CAAC,MAAc;IAChC,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,oFAAoF;AACpF,sFAAsF;AACtF,SAAS,MAAM,CAAC,IAAY,EAAE,MAA0B,EAAE,OAAe;IACvE,IAAI,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACnD,IAAI,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC;IAC9F,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,UAAU,CAAC;IAC3C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC;IAC9D,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IAC9D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/adapters/process/launch.js

@@ -0,0 +1,55 @@
+// Start an executable that findExecutable resolved. A batch file runs under cmd.exe,
+// which reads the command line first. The batch then reads each argument itself
+// (`%~1`, as mvn.cmd does) or hands them all on (`%*`, as the shims npm, Scoop and
+// Chocolatey install do), and cmd reads that line again. Caret escaping throughout,
+// as cross-spawn applies it, suits only one of those readers, so fx starts every batch
+// file itself and leaves everything else to cross-spawn.
+import { spawn as spawnNode } from 'node:child_process';
+import path from 'node:path';
+import spawn from 'cross-spawn';
+const BATCH = /\.(?:bat|cmd)$/i;
+// What cmd acts on outside quotes.
+const SPECIAL = /[&|<>^()!]/;
+export function launch(executable, args, options) {
+    if (process.platform !== 'win32' || !BATCH.test(executable))
+        return spawn(executable, [...args], options);
+    // /v:off keeps !name! literal whatever delayed expansion the registry turns on.
+    return spawnNode(process.env['comspec'] ?? 'cmd.exe', ['/d', '/v:off', '/s', '/c', `"${batchLine([path.normalize(executable), ...args])}"`], { ...options, windowsVerbatimArguments: true });
+}
+// Every argument is quoted for the program at the end of the chain, and cmd leaves
+// whatever sits inside quotes alone, so an argument without a quote of its own reaches
+// `%~1` unchanged. A quote inside an argument turns cmd's quoting off until the next
+// one; there, cmd's special characters are escaped for both of its reads. Each percent
+// sign is followed by an empty expansion, so no %name% survives to expand.
+function batchLine(vector) {
+    let line = '';
+    let quoted = false;
+    for (const char of vector.map(programArgument).join(' ')) {
+        if (char === '"')
+            quoted = !quoted;
+        if (char === '%')
+            line += '%%cd:~,%';
+        else if (!quoted && SPECIAL.test(char))
+            line += '^^^' + char;
+        else
+            line += char;
+    }
+    return line;
+}
+// The program's own reading of its command line: backslashes are literal except in
+// a run before a quote, so such a run is doubled, before an inner quote and before
+// the closing one.
+function programArgument(arg) {
+    let text = '"';
+    let slashes = 0;
+    for (const char of arg) {
+        if (char === '\\') {
+            slashes += 1;
+            continue;
+        }
+        text += '\\'.repeat(char === '"' ? slashes * 2 + 1 : slashes) + char;
+        slashes = 0;
+    }
+    return text + '\\'.repeat(slashes * 2) + '"';
+}
+//# sourceMappingURL=launch.js.map