@ankhorage/repository 0.4.19 → 0.5.1

package/dist/providers/github/services/materializeGitHubRepositoryWithGatewayAsync.js

@@ -0,0 +1,219 @@
+import { chmod, mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+/*** Materialize a GitHub repository through an injected read gateway for deterministic testing. */
+export async function materializeGitHubRepositoryWithGatewayAsync(options, gateway) {
+    const parsed = parseGitHubRepositoryUrl(options.url);
+    const repository = await gateway.inspectRepositoryAsync(parsed.target);
+    const explicitRef = normalizeRef(options.ref);
+    const revision = explicitRef === undefined
+        ? await resolveUrlRevisionAsync(gateway, parsed, repository.defaultBranch)
+        : await gateway.resolveRevisionAsync(parsed.target, explicitRef);
+    const tree = await gateway.readTreeAsync(parsed.target, revision.treeSha);
+    const validated = validateTree(tree.entries, tree.truncated);
+    const rootPath = await createMaterializationRootAsync(options.destinationPath);
+    try {
+        await writeFileBatchesAsync(gateway, parsed.target, revision.commitSha, rootPath, validated.files);
+    }
+    catch (error) {
+        await rm(rootPath, { force: true, recursive: true });
+        throw error;
+    }
+    return {
+        rootPath,
+        revision: revision.commitSha,
+        diagnostics: validated.diagnostics,
+        repository: {
+            owner: parsed.target.owner,
+            name: parsed.target.name,
+            url: repository.url,
+            defaultBranch: repository.defaultBranch,
+        },
+        cleanupAsync: () => rm(rootPath, { force: true, recursive: true }),
+    };
+}
+const MAX_FILE_COUNT = 20_000;
+const MAX_TOTAL_BYTES = 256 * 1024 * 1024;
+const WRITE_BATCH_SIZE = 8;
+/*** Parse a normal GitHub repository, tree, blob, or commit URL into repository and ref intent. */
+function parseGitHubRepositoryUrl(value) {
+    const url = parseRepositoryUrl(value);
+    assertGitHubRepositoryUrl(url);
+    const segments = decodePathSegments(url);
+    if (segments.length < 2) {
+        throw invalidRepositoryUrl();
+    }
+    const [owner = '', repositorySegment = '', route] = segments;
+    const name = repositorySegment.endsWith('.git')
+        ? repositorySegment.slice(0, -4)
+        : repositorySegment;
+    assertRepositoryIdentity(owner, name);
+    const routeSegments = segments.slice(3);
+    if (route === undefined) {
+        return {
+            target: { owner, name, url: `https://github.com/${owner}/${name}` },
+            refCandidates: [],
+        };
+    }
+    if (route === 'commit') {
+        if (routeSegments.length !== 1)
+            throw invalidRepositoryUrl();
+        return {
+            target: { owner, name, url: `https://github.com/${owner}/${name}` },
+            refCandidates: [routeSegments[0] ?? ''],
+        };
+    }
+    if (route !== 'tree' && route !== 'blob')
+        throw invalidRepositoryUrl();
+    if (routeSegments.length === 0)
+        throw invalidRepositoryUrl();
+    return {
+        target: { owner, name, url: `https://github.com/${owner}/${name}` },
+        refCandidates: createRefCandidates(routeSegments),
+    };
+}
+/*** Parse a repository URL while preserving the original parsing failure as the cause. */
+function parseRepositoryUrl(value) {
+    try {
+        return new URL(value);
+    }
+    catch (error) {
+        throw new Error('Repository URL must be a valid GitHub HTTPS URL.', { cause: error });
+    }
+}
+/*** Reject non-GitHub origins and embedded credentials while ignoring normal page query/anchor state. */
+function assertGitHubRepositoryUrl(url) {
+    if (url.protocol !== 'https:' ||
+        url.hostname.toLowerCase() !== 'github.com' ||
+        url.username !== '' ||
+        url.password !== '') {
+        throw invalidRepositoryUrl();
+    }
+}
+/*** Decode normal GitHub path segments and reject malformed encoded paths. */
+function decodePathSegments(url) {
+    try {
+        return url.pathname
+            .split('/')
+            .filter(Boolean)
+            .map((segment) => decodeURIComponent(segment));
+    }
+    catch (error) {
+        throw new Error('Repository URL contains an invalid encoded path.', { cause: error });
+    }
+}
+/*** Build longest-first ref candidates so slash-containing branch/tag names resolve like GitHub URLs. */
+function createRefCandidates(segments) {
+    return Array.from({ length: segments.length }, (_, index) => segments.slice(0, segments.length - index).join('/'));
+}
+/*** Resolve URL-derived ref candidates, falling back to the repository default branch. */
+async function resolveUrlRevisionAsync(gateway, parsed, defaultBranch) {
+    if (parsed.refCandidates.length === 0) {
+        return gateway.resolveRevisionAsync(parsed.target, defaultBranch);
+    }
+    for (const candidate of parsed.refCandidates) {
+        try {
+            return await gateway.resolveRevisionAsync(parsed.target, candidate);
+        }
+        catch {
+            // GitHub tree/blob URLs can contain both slash-containing refs and trailing repository paths.
+        }
+    }
+    throw new Error('GitHub repository URL does not resolve to a branch, tag, or commit.');
+}
+/*** Create the consistent public error for unsupported GitHub URL shapes. */
+function invalidRepositoryUrl() {
+    return new Error('Repository URL must be a GitHub repository, tree, blob, or commit HTTPS URL.');
+}
+/*** Validate canonical GitHub owner and repository path segments. */
+function assertRepositoryIdentity(owner, name) {
+    if (!/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,98}[A-Za-z0-9])?$/u.test(owner)) {
+        throw new Error('GitHub repository owner is invalid.');
+    }
+    if (!/^[A-Za-z0-9._-]{1,100}$/u.test(name) || name === '.' || name === '..') {
+        throw new Error('GitHub repository name is invalid.');
+    }
+}
+/*** Normalize an optional requested ref while rejecting an explicitly empty value. */
+function normalizeRef(value) {
+    if (value === undefined)
+        return undefined;
+    const normalized = value.trim();
+    if (normalized === '')
+        throw new Error('GitHub repository ref must not be empty.');
+    return normalized;
+}
+/*** Reject incomplete or unexpectedly large remote trees while safely omitting symbolic links. */
+function validateTree(entries, truncated) {
+    if (truncated) {
+        throw new Error('GitHub repository tree is truncated and cannot be materialized safely.');
+    }
+    const symlinks = entries.filter((entry) => entry.type === 'blob' && entry.mode === '120000');
+    const files = entries.filter((entry) => entry.type === 'blob' && entry.mode !== '120000');
+    if (files.length > MAX_FILE_COUNT) {
+        throw new Error(`GitHub repository exceeds the ${MAX_FILE_COUNT} file materialization limit.`);
+    }
+    const totalBytes = files.reduce((sum, entry) => {
+        if (entry.size === undefined) {
+            throw new Error(`GitHub repository file size is missing for ${entry.path}.`);
+        }
+        return sum + entry.size;
+    }, 0);
+    if (totalBytes > MAX_TOTAL_BYTES) {
+        throw new Error('GitHub repository exceeds the 256 MiB materialization limit.');
+    }
+    return {
+        files,
+        diagnostics: symlinks.map((entry) => ({
+            code: 'symlink-skipped',
+            severity: 'warning',
+            path: entry.path,
+            message: 'Symbolic link skipped during safe GitHub repository materialization.',
+        })),
+    };
+}
+/*** Create either an isolated temporary root or one explicitly requested empty destination. */
+async function createMaterializationRootAsync(destinationPath) {
+    if (destinationPath === undefined) {
+        return mkdtemp(join(tmpdir(), 'ankhorage-repository-'));
+    }
+    const rootPath = resolve(destinationPath);
+    await mkdir(dirname(rootPath), { recursive: true });
+    await mkdir(rootPath);
+    return rootPath;
+}
+/*** Download and write bounded groups so large repositories do not fan out unbounded requests. */
+async function writeFileBatchesAsync(gateway, target, revision, rootPath, entries) {
+    const batches = Array.from({ length: Math.ceil(entries.length / WRITE_BATCH_SIZE) }, (_, index) => entries.slice(index * WRITE_BATCH_SIZE, (index + 1) * WRITE_BATCH_SIZE));
+    for (const batch of batches) {
+        await Promise.all(batch.map((entry) => materializeFileAsync(gateway, target, revision, rootPath, entry)));
+    }
+}
+/*** Materialize one ordinary Git blob beneath the isolated root and preserve executable mode. */
+async function materializeFileAsync(gateway, target, revision, rootPath, entry) {
+    const destination = resolveMaterializationPath(rootPath, entry.path);
+    const content = await gateway.readFileAsync(target, revision, entry.path);
+    if (entry.size !== content.byteLength) {
+        throw new Error(`GitHub repository file size changed while reading ${entry.path}.`);
+    }
+    await mkdir(dirname(destination), { recursive: true });
+    await writeFile(destination, content);
+    if (entry.mode === '100755')
+        await chmod(destination, 0o755);
+}
+/*** Resolve one provider path while rejecting traversal outside the materialization root. */
+function resolveMaterializationPath(rootPath, repositoryPath) {
+    if (repositoryPath.trim() === '' ||
+        repositoryPath.includes('\\') ||
+        repositoryPath.startsWith('/') ||
+        repositoryPath.split('/').some((segment) => segment === '..' || segment === '')) {
+        throw new Error(`Unsafe GitHub repository path: ${repositoryPath}.`);
+    }
+    const destination = resolve(rootPath, ...repositoryPath.split('/'));
+    const child = relative(rootPath, destination);
+    if (child === '' || child === '..' || child.startsWith(`..${sep}`) || isAbsolute(child)) {
+        throw new Error(`Unsafe GitHub repository path: ${repositoryPath}.`);
+    }
+    return destination;
+}
+//# sourceMappingURL=materializeGitHubRepositoryWithGatewayAsync.js.map

package/dist/providers/github/services/materializeGitHubRepositoryWithGatewayAsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"materializeGitHubRepositoryWithGatewayAsync.js","sourceRoot":"","sources":["../../../../src/providers/github/services/materializeGitHubRepositoryWithGatewayAsync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAW9E,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,2CAA2C,CAC/D,OAA+C,EAC/C,OAAoC;IAEpC,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,QAAQ,GACZ,WAAW,KAAK,SAAS;QACvB,CAAC,CAAC,MAAM,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,aAAa,CAAC;QAC1E,CAAC,CAAC,MAAM,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,8BAA8B,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAE/E,IAAI,CAAC;QACH,MAAM,qBAAqB,CACzB,OAAO,EACP,MAAM,CAAC,MAAM,EACb,QAAQ,CAAC,SAAS,EAClB,QAAQ,EACR,SAAS,CAAC,KAAK,CAChB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO;QACL,QAAQ;QACR,QAAQ,EAAE,QAAQ,CAAC,SAAS;QAC5B,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,UAAU,EAAE;YACV,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK;YAC1B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,aAAa,EAAE,UAAU,CAAC,aAAa;SACxC;QACD,YAAY,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAO3B,mGAAmG;AACnG,SAAS,wBAAwB,CAAC,KAAa;IAC7C,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACtC,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,oBAAoB,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,iBAAiB,GAAG,EAAE,EAAE,KAAK,CAAC,GAAG,QAAQ,CAAC;IAC7D,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7C,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,iBAAiB,CAAC;IACtB,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAEtC,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,sBAAsB,KAAK,IAAI,IAAI,EAAE,EAAE;YACnE,aAAa,EAAE,EAAE;SAClB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,oBAAoB,EAAE,CAAC;QAC7D,OAAO;YACL,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,sBAAsB,KAAK,IAAI,IAAI,EAAE,EAAE;YACnE,aAAa,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACxC,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM;QAAE,MAAM,oBAAoB,EAAE,CAAC;IACvE,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,oBAAoB,EAAE,CAAC;IAE7D,OAAO;QACL,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,sBAAsB,KAAK,IAAI,IAAI,EAAE,EAAE;QACnE,aAAa,EAAE,mBAAmB,CAAC,aAAa,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,yGAAyG;AACzG,SAAS,yBAAyB,CAAC,GAAQ;IACzC,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;QACzB,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,YAAY;QAC3C,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE,EACnB,CAAC;QACD,MAAM,oBAAoB,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS,kBAAkB,CAAC,GAAQ;IAClC,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,QAAQ;aAChB,KAAK,CAAC,GAAG,CAAC;aACV,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,kDAAkD,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,yGAAyG;AACzG,SAAS,mBAAmB,CAAC,QAA2B;IACtD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAC1D,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CACrD,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,uBAAuB,CACpC,OAAoC,EACpC,MAAiC,EACjC,aAAqB;IAErB,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACtE,CAAC;QAAC,MAAM,CAAC;YACP,8FAA8F;QAChG,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;AACzF,CAAC;AAED,6EAA6E;AAC7E,SAAS,oBAAoB;IAC3B,OAAO,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;AACnG,CAAC;AAED,qEAAqE;AACrE,SAAS,wBAAwB,CAAC,KAAa,EAAE,IAAY;IAC3D,IAAI,CAAC,kDAAkD,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,UAAU,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACnF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,kGAAkG;AAClG,SAAS,YAAY,CACnB,OAA6C,EAC7C,SAAkB;IAKlB,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,iCAAiC,cAAc,8BAA8B,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC;IAC1B,CAAC,EAAE,CAAC,CAAC,CAAC;IACN,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO;QACL,KAAK;QACL,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpC,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,sEAAsE;SAChF,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,KAAK,UAAU,8BAA8B,CAC3C,eAAmC;IAEnC,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC1C,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kGAAkG;AAClG,KAAK,UAAU,qBAAqB,CAClC,OAAoC,EACpC,MAAkC,EAClC,QAAgB,EAChB,QAAgB,EAChB,OAA6C;IAE7C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAChG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,gBAAgB,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,gBAAgB,CAAC,CACxE,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CACvF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,KAAK,UAAU,oBAAoB,CACjC,OAAoC,EACpC,MAAkC,EAClC,QAAgB,EAChB,QAAgB,EAChB,KAAgC;IAEhC,MAAM,WAAW,GAAG,0BAA0B,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,qDAAqD,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,6FAA6F;AAC7F,SAAS,0BAA0B,CAAC,QAAgB,EAAE,cAAsB;IAC1E,IACE,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;QAC5B,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC7B,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC;QAC9B,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE,CAAC,EAC/E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kCAAkC,cAAc,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,kCAAkC,cAAc,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/providers/github/services/materializeGitHubRepositoryWithGatewayAsync.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=materializeGitHubRepositoryWithGatewayAsync.test.d.ts.map

package/dist/providers/github/services/materializeGitHubRepositoryWithGatewayAsync.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"materializeGitHubRepositoryWithGatewayAsync.test.d.ts","sourceRoot":"","sources":["../../../../src/providers/github/services/materializeGitHubRepositoryWithGatewayAsync.test.ts"],"names":[],"mappings":""}

package/dist/providers/github/services/materializeGitHubRepositoryWithGatewayAsync.test.js

@@ -0,0 +1,174 @@
+import { access, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { expect, test } from 'bun:test';
+import { materializeGitHubRepositoryWithGatewayAsync } from './materializeGitHubRepositoryWithGatewayAsync.js';
+test('materializes an exact explicit GitHub revision and cleans up the isolated root', async () => {
+    const requestedRefs = [];
+    const gateway = createGateway({
+        requestedRefs,
+        files: {
+            'package.json': '{"name":"demo"}\n',
+            'src/index.ts': 'export const demo = true;\n',
+        },
+    });
+    const result = await materializeGitHubRepositoryWithGatewayAsync({ url: 'https://github.com/ankhorage/demo', ref: 'feature/read' }, gateway);
+    expect(requestedRefs).toEqual(['feature/read']);
+    expect(result.revision).toBe('commit-sha');
+    expect(result.diagnostics).toEqual([]);
+    expect(result.repository).toEqual({
+        owner: 'ankhorage',
+        name: 'demo',
+        url: 'https://github.com/ankhorage/demo',
+        defaultBranch: 'main',
+    });
+    expect(await readFile(join(result.rootPath, 'src/index.ts'), 'utf8')).toBe('export const demo = true;\n');
+    await result.cleanupAsync();
+    await expectMissingPathAsync(result.rootPath);
+});
+test('uses the remote default branch for a normal repository URL', async () => {
+    const requestedRefs = [];
+    const result = await materializeGitHubRepositoryWithGatewayAsync({ url: 'https://github.com/ankhorage/demo.git?tab=readme-ov-file#readme' }, createGateway({ requestedRefs, defaultBranch: 'develop', files: {} }));
+    expect(requestedRefs).toEqual(['develop']);
+    await result.cleanupAsync();
+});
+test('resolves slash-containing refs from normal GitHub tree URLs', async () => {
+    const requestedRefs = [];
+    const result = await materializeGitHubRepositoryWithGatewayAsync({ url: 'https://github.com/ankhorage/demo/tree/feature/read' }, createGateway({
+        requestedRefs,
+        acceptedRefs: ['feature/read'],
+        files: { 'src/index.ts': 'export {};\n' },
+    }));
+    expect(requestedRefs).toEqual(['feature/read']);
+    await result.cleanupAsync();
+});
+test('resolves a ref from normal GitHub blob URLs while ignoring the file path', async () => {
+    const requestedRefs = [];
+    const result = await materializeGitHubRepositoryWithGatewayAsync({ url: 'https://github.com/ankhorage/demo/blob/main/src/index.ts#L1' }, createGateway({
+        requestedRefs,
+        acceptedRefs: ['main'],
+        files: { 'src/index.ts': 'export {};\n' },
+    }));
+    expect(requestedRefs).toEqual(['main/src/index.ts', 'main/src', 'main']);
+    await result.cleanupAsync();
+});
+test('resolves normal GitHub commit URLs directly', async () => {
+    const requestedRefs = [];
+    const result = await materializeGitHubRepositoryWithGatewayAsync({ url: 'https://github.com/ankhorage/demo/commit/deadbeef' }, createGateway({
+        requestedRefs,
+        acceptedRefs: ['deadbeef'],
+        files: {},
+    }));
+    expect(requestedRefs).toEqual(['deadbeef']);
+    await result.cleanupAsync();
+});
+test('rejects traversal before downloading an unsafe repository file', async () => {
+    let reads = 0;
+    const gateway = createGateway({
+        files: { '../escape.ts': 'escape' },
+        onRead: () => {
+            reads += 1;
+        },
+    });
+    await expectFailureAsync(() => materializeGitHubRepositoryWithGatewayAsync({ url: 'https://github.com/ankhorage/demo' }, gateway), 'Unsafe GitHub repository path');
+    expect(reads).toBe(0);
+});
+test('rejects truncated GitHub trees before materialization', async () => {
+    const gateway = createGateway({ files: {}, truncated: true });
+    await expectFailureAsync(() => materializeGitHubRepositoryWithGatewayAsync({ url: 'https://github.com/ankhorage/demo' }, gateway), 'repository tree is truncated');
+});
+test('skips symbolic links with warnings without reading their target bytes', async () => {
+    const reads = [];
+    const gateway = {
+        ...createGateway({
+            files: { 'src/index.ts': 'export {};\n' },
+            onReadPath: (path) => reads.push(path),
+        }),
+        readTreeAsync: () => Promise.resolve({
+            truncated: false,
+            entries: [
+                {
+                    mode: '120000',
+                    path: 'CLAUDE.md',
+                    sha: 'link-sha',
+                    size: 9,
+                    type: 'blob',
+                },
+                {
+                    mode: '100644',
+                    path: 'src/index.ts',
+                    sha: 'file-sha',
+                    size: 11,
+                    type: 'blob',
+                },
+            ],
+        }),
+    };
+    const result = await materializeGitHubRepositoryWithGatewayAsync({ url: 'https://github.com/ankhorage/demo' }, gateway);
+    expect(reads).toEqual(['src/index.ts']);
+    expect(await readFile(join(result.rootPath, 'src/index.ts'), 'utf8')).toBe('export {};\n');
+    expect(result.diagnostics).toEqual([
+        {
+            code: 'symlink-skipped',
+            severity: 'warning',
+            path: 'CLAUDE.md',
+            message: 'Symbolic link skipped during safe GitHub repository materialization.',
+        },
+    ]);
+    await expectMissingPathAsync(join(result.rootPath, 'CLAUDE.md'));
+    await result.cleanupAsync();
+});
+function createGateway(options) {
+    const files = new Map(Object.entries(options.files));
+    const entries = [...files].map(([path, fileContent], index) => ({
+        mode: '100644',
+        path,
+        sha: `blob-${index}`,
+        size: Buffer.byteLength(fileContent),
+        type: 'blob',
+    }));
+    return {
+        inspectRepositoryAsync: (target) => Promise.resolve({
+            defaultBranch: options.defaultBranch ?? 'main',
+            url: target.url,
+        }),
+        resolveRevisionAsync: (_target, ref) => {
+            options.requestedRefs?.push(ref);
+            if (options.acceptedRefs !== undefined && !options.acceptedRefs.includes(ref)) {
+                return Promise.reject(new Error(`Unknown fixture ref: ${ref}`));
+            }
+            return Promise.resolve({ commitSha: 'commit-sha', treeSha: 'tree-sha' });
+        },
+        readTreeAsync: () => Promise.resolve({
+            entries,
+            truncated: options.truncated ?? false,
+        }),
+        readFileAsync: (_target, _revision, path) => {
+            options.onRead?.();
+            options.onReadPath?.(path);
+            const fileContent = files.get(path);
+            if (fileContent === undefined)
+                throw new Error(`Missing fixture: ${path}`);
+            return Promise.resolve(Buffer.from(fileContent));
+        },
+    };
+}
+async function expectFailureAsync(operation, message) {
+    try {
+        await operation();
+        throw new Error('Expected operation to fail.');
+    }
+    catch (error) {
+        expect(error).toBeInstanceOf(Error);
+        expect(error.message).toContain(message);
+    }
+}
+async function expectMissingPathAsync(path) {
+    try {
+        await access(path);
+        throw new Error('Expected path to be missing.');
+    }
+    catch (error) {
+        expect(error).toBeInstanceOf(Error);
+    }
+}
+//# sourceMappingURL=materializeGitHubRepositoryWithGatewayAsync.test.js.map

package/dist/providers/github/services/materializeGitHubRepositoryWithGatewayAsync.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"materializeGitHubRepositoryWithGatewayAsync.test.js","sourceRoot":"","sources":["../../../../src/providers/github/services/materializeGitHubRepositoryWithGatewayAsync.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAGxC,OAAO,EAAE,2CAA2C,EAAE,MAAM,kDAAkD,CAAC;AAE/G,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,aAAa,CAAC;QAC5B,aAAa;QACb,KAAK,EAAE;YACL,cAAc,EAAE,mBAAmB;YACnC,cAAc,EAAE,6BAA6B;SAC9C;KACF,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,2CAA2C,CAC9D,EAAE,GAAG,EAAE,mCAAmC,EAAE,GAAG,EAAE,cAAc,EAAE,EACjE,OAAO,CACR,CAAC;IAEF,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IAChD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;QAChC,KAAK,EAAE,WAAW;QAClB,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,mCAAmC;QACxC,aAAa,EAAE,MAAM;KACtB,CAAC,CAAC;IACH,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CACxE,6BAA6B,CAC9B,CAAC;IAEF,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;IAC5B,MAAM,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;IAC5E,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,2CAA2C,CAC9D,EAAE,GAAG,EAAE,iEAAiE,EAAE,EAC1E,aAAa,CAAC,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CACtE,CAAC;IAEF,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3C,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;IAC7E,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,2CAA2C,CAC9D,EAAE,GAAG,EAAE,qDAAqD,EAAE,EAC9D,aAAa,CAAC;QACZ,aAAa;QACb,YAAY,EAAE,CAAC,cAAc,CAAC;QAC9B,KAAK,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE;KAC1C,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IAChD,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,2CAA2C,CAC9D,EAAE,GAAG,EAAE,6DAA6D,EAAE,EACtE,aAAa,CAAC;QACZ,aAAa;QACb,YAAY,EAAE,CAAC,MAAM,CAAC;QACtB,KAAK,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE;KAC1C,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,mBAAmB,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;IAC7D,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,2CAA2C,CAC9D,EAAE,GAAG,EAAE,mDAAmD,EAAE,EAC5D,aAAa,CAAC;QACZ,aAAa;QACb,YAAY,EAAE,CAAC,UAAU,CAAC;QAC1B,KAAK,EAAE,EAAE;KACV,CAAC,CACH,CAAC;IAEF,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5C,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;IAChF,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,aAAa,CAAC;QAC5B,KAAK,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE;QACnC,MAAM,EAAE,GAAG,EAAE;YACX,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,kBAAkB,CACtB,GAAG,EAAE,CACH,2CAA2C,CACzC,EAAE,GAAG,EAAE,mCAAmC,EAAE,EAC5C,OAAO,CACR,EACH,+BAA+B,CAChC,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxB,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;IACvE,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9D,MAAM,kBAAkB,CACtB,GAAG,EAAE,CACH,2CAA2C,CACzC,EAAE,GAAG,EAAE,mCAAmC,EAAE,EAC5C,OAAO,CACR,EACH,8BAA8B,CAC/B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;IACvF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAgC;QAC3C,GAAG,aAAa,CAAC;YACf,KAAK,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE;YACzC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;SACvC,CAAC;QACF,aAAa,EAAE,GAAG,EAAE,CAClB,OAAO,CAAC,OAAO,CAAC;YACd,SAAS,EAAE,KAAK;YAChB,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,WAAW;oBACjB,GAAG,EAAE,UAAU;oBACf,IAAI,EAAE,CAAC;oBACP,IAAI,EAAE,MAAM;iBACb;gBACD;oBACE,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,cAAc;oBACpB,GAAG,EAAE,UAAU;oBACf,IAAI,EAAE,EAAE;oBACR,IAAI,EAAE,MAAM;iBACb;aACF;SACF,CAAC;KACL,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,2CAA2C,CAC9D,EAAE,GAAG,EAAE,mCAAmC,EAAE,EAC5C,OAAO,CACR,CAAC;IAEF,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IACxC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3F,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC;QACjC;YACE,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,sEAAsE;SAChF;KACF,CAAC,CAAC;IACH,MAAM,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IACjE,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,OAQtB;IACC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,GAAG,EAAE,QAAQ,KAAK,EAAE;QACpB,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC;QACpC,IAAI,EAAE,MAAe;KACtB,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,sBAAsB,EAAE,CAAC,MAAM,EAAE,EAAE,CACjC,OAAO,CAAC,OAAO,CAAC;YACd,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,MAAM;YAC9C,GAAG,EAAE,MAAM,CAAC,GAAG;SAChB,CAAC;QACJ,oBAAoB,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;YACrC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9E,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,aAAa,EAAE,GAAG,EAAE,CAClB,OAAO,CAAC,OAAO,CAAC;YACd,OAAO;YACP,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK;SACtC,CAAC;QACJ,aAAa,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;YAC1C,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,WAAW,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAC3E,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,SAAiC,EACjC,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,SAAS,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAE,KAAe,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,IAAY;IAChD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ankhorage/repository",
-  "version": "0.4.19",
+  "version": "0.5.1",
   "description": "Standalone repository capability for connecting and managing an app project's source repository.",
   "type": "module",
   "license": "MIT",
@@ -54,7 +54,8 @@
     "category": "repository",
     "provider": "./dist/cli/index.js",
     "capabilities": [
-      "repository.connect"
+      "repository.connect",
+      "repository.materialize"
     ]
   },
   "publishConfig": {
@@ -75,15 +76,15 @@
     "knip:check": "ankhorage-knip"
   },
   "devDependencies": {
-    "@ankhorage/devtools": "^1.18.5",
-    "@ankhorage/paradox": "^0.1.26",
-    "@types/bun": "^1.4.1",
-    "@types/node": "^24.13.3",
+    "@ankhorage/devtools": "^2.1.6",
+    "@ankhorage/paradox": "^0.2.27",
+    "@types/bun": "^1.4.2",
+    "@types/node": "^26.6.4",
     "typescript": "~6.0.3"
   },
   "packageManager": "bun@1.4.2",
   "dependencies": {
-    "@ankhorage/contracts": "^22.8.2",
-    "ignore": "^7.0.8"
+    "@ankhorage/contracts": "^22.8.99",
+    "ignore": "^7.0.12"
   }
 }

package/dist/readme-usage.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=readme-usage.d.ts.map

package/dist/readme-usage.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"readme-usage.d.ts","sourceRoot":"","sources":["../src/readme-usage.ts"],"names":[],"mappings":""}

package/dist/readme-usage.js

@@ -1,32 +0,0 @@
-/***
- * Connect a project folder to its source repository
- *
- * `@ankhorage/repository` consumes only the project's `RepositoryManifest` slice and delegates
- * GitHub operations to the local authenticated `gh` adapter. It creates a missing repository,
- * publishes the project snapshot to `main`, stores only the repository slice in
- * `.ankhorage/repository.json`, and refuses unrelated existing repositories.
- *
- * See [`examples/basic-usage.ts`](../examples/basic-usage.ts) for a complete programmatic example.
- *
- * @usage
- */
-import { connectRepositoryAsync } from '@ankhorage/repository';
-const result = await connectRepositoryAsync({
-    projectPath: './my-project',
-    repository: {
-        provider: 'github',
-        owner: 'ankhorage',
-        name: 'my-project',
-        url: 'https://github.com/ankhorage/my-project',
-        defaultBranch: 'main',
-    },
-    visibility: 'private',
-});
-if (result.status === 'conflict' || result.status === 'recoverable-failure') {
-    console.error(`${result.status}: ${result.message}`);
-    process.exitCode = 1;
-}
-else {
-    console.log(JSON.stringify(result));
-}
-//# sourceMappingURL=readme-usage.js.map

package/dist/readme-usage.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"readme-usage.js","sourceRoot":"","sources":["../src/readme-usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;IAC1C,WAAW,EAAE,cAAc;IAC3B,UAAU,EAAE;QACV,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,WAAW;QAClB,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,yCAAyC;QAC9C,aAAa,EAAE,MAAM;KACtB;IACD,UAAU,EAAE,SAAS;CACtB,CAAC,CAAC;AAEH,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;IAC5E,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC;KAAM,CAAC;IACN,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;AACtC,CAAC"}