@aspruyt/xfg 4.0.0 → 4.0.2

package/dist/lifecycle/github-lifecycle-provider.js

@@ -1,8 +1,10 @@
 import { escapeShellArg } from "../shared/shell-utils.js";
 import { defaultExecutor, } from "../shared/command-executor.js";
 import { withRetry, DEFAULT_PERMANENT_ERROR_PATTERNS, } from "../shared/retry-utils.js";
-import { isGitHubRepo, } from "../shared/repo-detector.js";
+import { assertGitHubRepo, } from "../shared/repo-detector.js";
 import { logger } from "../shared/logger.js";
+import { toErrorMessage } from "../shared/type-guards.js";
+import { buildTokenEnv, getHostnameFlag } from "../shared/gh-api-utils.js";
 /**
  * Error messages that indicate "repo not found" vs actual errors.
  */
@@ -15,25 +17,21 @@ const REPO_NOT_FOUND_PATTERNS = [
  * Check if an error indicates repo not found (vs network/auth error).
  */
 function isRepoNotFoundError(error) {
-    const message = error instanceof Error
-        ? error.message + (error.stderr ?? "")
-        : String(error);
+    const message = toErrorMessage(error) +
+        ((error instanceof Error
+            ? error.stderr
+            : undefined) ?? "");
     return REPO_NOT_FOUND_PATTERNS.some((pattern) => message.includes(pattern));
 }
-/**
- * Get the hostname flag for gh commands.
- * Returns "--hostname HOST" for GHE, empty string for github.com.
- */
-function getHostnameFlag(repoInfo) {
-    if (repoInfo.host && repoInfo.host !== "github.com") {
-        return `--hostname ${escapeShellArg(repoInfo.host)}`;
-    }
-    return "";
-}
 /**
  * Default timeout for waiting for fork readiness (60 seconds).
  */
 const FORK_READY_TIMEOUT_MS = 60_000;
+/**
+ * After repo creation, GitHub may return 404 due to eventual consistency.
+ * Exclude 404/not-found from permanent errors so withRetry retries them.
+ */
+const POST_CREATE_PERMANENT_PATTERNS = DEFAULT_PERMANENT_ERROR_PATTERNS.filter((p) => !p.test("404 Not Found"));
 /**
  * Interval between fork readiness checks (2 seconds).
  */
@@ -58,49 +56,47 @@ export class GitHubLifecycleProvider {
      * Uses gh api to query the user/org endpoint.
      */
     async isOrganization(owner, repoInfo, token) {
-        const tokenPrefix = this.buildTokenPrefix(token);
-        const hostnameFlag = getHostnameFlag(repoInfo);
-        const hostnamePart = hostnameFlag ? `${hostnameFlag} ` : "";
-        const command = `${tokenPrefix}gh api ${hostnamePart}users/${escapeShellArg(owner)}`;
+        const { tokenEnv, prefix } = this.buildGhApiPrefix(repoInfo, token);
+        const command = `${prefix}users/${escapeShellArg(owner)}`;
         try {
-            const stdout = await withRetry(() => this.executor.exec(command, this.cwd), { retries: this.retries });
+            const stdout = await withRetry(() => this.executor.exec(command, this.cwd, { env: tokenEnv }), { retries: this.retries });
             const data = JSON.parse(stdout);
             return data.type === "Organization";
         }
         catch (error) {
             // If we can't determine, assume it's an org (safer - uses --org flag).
             // This may cause fork to fail with a misleading error for personal accounts.
-            const errMsg = error instanceof Error ? error.message : String(error);
+            const errMsg = toErrorMessage(error);
             logger.debug(`Could not determine if '${owner}' is an organization, defaulting to org behavior: ${errMsg}`);
-            logger.info(`Warning: Could not verify if '${owner}' is an organization or user account. ` +
+            logger.warn(`Could not verify if '${owner}' is an organization or user account. ` +
                 `If fork fails, check your authentication (gh auth status) and ensure the ` +
                 `target owner is correct.`);
             return true;
         }
     }
     assertGitHub(repoInfo) {
-        if (!isGitHubRepo(repoInfo)) {
-            throw new Error(`GitHubLifecycleProvider requires GitHub repo, got: ${repoInfo.type}`);
-        }
+        assertGitHubRepo(repoInfo, "GitHubLifecycleProvider");
     }
     /**
-     * Build GH_TOKEN prefix for gh CLI commands.
-     * Returns "GH_TOKEN=<escaped_token> " when token is provided, "" otherwise.
-     * Token is escaped via escapeShellArg to prevent injection.
+     * Builds the common gh API command prefix parts for a given repo.
+     * Returns tokenEnv for exec options, and the command prefix string
+     * (e.g., "gh api --hostname host repos/owner/repo").
      */
-    buildTokenPrefix(token) {
-        return token ? `GH_TOKEN=${escapeShellArg(token)} ` : "";
+    buildGhApiPrefix(repoInfo, token) {
+        const tokenEnv = buildTokenEnv(token);
+        const hostnameFlag = getHostnameFlag(repoInfo);
+        const hostnamePart = hostnameFlag ? `${hostnameFlag} ` : "";
+        const apiPath = `repos/${escapeShellArg(repoInfo.owner)}/${escapeShellArg(repoInfo.repo)}`;
+        return { tokenEnv, prefix: `gh api ${hostnamePart}`, apiPath };
     }
     async exists(repoInfo, token) {
         this.assertGitHub(repoInfo);
-        const tokenPrefix = this.buildTokenPrefix(token);
-        const hostnameFlag = getHostnameFlag(repoInfo);
-        const hostnamePart = hostnameFlag ? `${hostnameFlag} ` : "";
-        const command = `${tokenPrefix}gh api ${hostnamePart}repos/${escapeShellArg(repoInfo.owner)}/${escapeShellArg(repoInfo.repo)}`;
+        const { tokenEnv, prefix, apiPath } = this.buildGhApiPrefix(repoInfo, token);
+        const command = `${prefix}${apiPath}`;
         try {
             // Note: withRetry already classifies 404/not-found as permanent errors,
             // so retries are aborted immediately for non-existent repos.
-            await withRetry(() => this.executor.exec(command, this.cwd), {
+            await withRetry(() => this.executor.exec(command, this.cwd, { env: tokenEnv }), {
                 retries: this.retries,
             });
             return true;
@@ -116,9 +112,9 @@ export class GitHubLifecycleProvider {
     }
     async create(repoInfo, settings, token) {
         this.assertGitHub(repoInfo);
-        const tokenPrefix = this.buildTokenPrefix(token);
+        const tokenEnv = buildTokenEnv(token);
         const parts = [
-            `${tokenPrefix}gh repo create`,
+            "gh repo create",
             escapeShellArg(`${repoInfo.owner}/${repoInfo.repo}`),
         ];
         // Visibility flag (default to private for safety)
@@ -146,28 +142,24 @@ export class GitHubLifecycleProvider {
         // This avoids empty repos where HEAD doesn't resolve.
         parts.push("--add-readme");
         const command = parts.join(" ");
-        await withRetry(() => this.executor.exec(command, this.cwd), {
+        await withRetry(() => this.executor.exec(command, this.cwd, { env: tokenEnv }), {
             retries: this.retries,
         });
         // Rename default branch if requested and it differs from what GitHub created.
         if (settings?.defaultBranch) {
-            const tokenPrefix = this.buildTokenPrefix(token);
-            const hostnameFlag = getHostnameFlag(repoInfo);
-            const hostnamePart = hostnameFlag ? `${hostnameFlag} ` : "";
-            const apiPath = `repos/${escapeShellArg(repoInfo.owner)}/${escapeShellArg(repoInfo.repo)}`;
-            // After repo creation, GitHub may return 404 due to eventual consistency.
-            // Exclude 404/not-found from permanent errors so withRetry retries them.
-            const postCreatePermanentPatterns = DEFAULT_PERMANENT_ERROR_PATTERNS.filter((p) => !p.test("404 Not Found"));
+            const { tokenEnv: branchTokenEnv, prefix, apiPath, } = this.buildGhApiPrefix(repoInfo, token);
             // Detect the actual default branch name
-            const actualBranch = (await withRetry(() => this.executor.exec(`${tokenPrefix}gh api ${hostnamePart}${apiPath} --jq '.default_branch'`, this.cwd), {
+            const actualBranch = (await withRetry(() => this.executor.exec(`${prefix}${apiPath} --jq '.default_branch'`, this.cwd, { env: branchTokenEnv }), {
                 retries: this.retries,
-                permanentErrorPatterns: postCreatePermanentPatterns,
+                permanentErrorPatterns: POST_CREATE_PERMANENT_PATTERNS,
             })).trim();
             if (actualBranch !== settings.defaultBranch) {
                 await this.renameBranch(repoInfo, actualBranch, settings.defaultBranch, token);
                 // Wait for the rename to propagate — GitHub's API may still report
                 // the old default branch for a few seconds after the rename call.
-                await this.waitForDefaultBranch(repoInfo, settings.defaultBranch, token);
+                await this.waitForDefaultBranch(repoInfo, settings.defaultBranch, {
+                    token,
+                });
             }
         }
         // Delete the README so xfg sync starts from a clean state.
@@ -183,12 +175,12 @@ export class GitHubLifecycleProvider {
         }
         // Determine if target owner is an organization or user
         const isOrg = await this.isOrganization(target.owner, target, token);
-        const tokenPrefix = this.buildTokenPrefix(token);
+        const tokenEnv = buildTokenEnv(token);
         // Build fork command
         // For orgs: gh repo fork <upstream> --org <target-org> --fork-name <name> --clone=false
         // For users: gh repo fork <upstream> --fork-name <name> --clone=false
         const parts = [
-            `${tokenPrefix}gh repo fork`,
+            "gh repo fork",
             escapeShellArg(`${upstream.owner}/${upstream.repo}`),
         ];
         if (isOrg) {
@@ -196,11 +188,15 @@ export class GitHubLifecycleProvider {
         }
         parts.push("--fork-name", escapeShellArg(target.repo), "--clone=false");
         const forkCommand = parts.join(" ");
-        await withRetry(() => this.executor.exec(forkCommand, this.cwd), {
+        await withRetry(() => this.executor.exec(forkCommand, this.cwd, { env: tokenEnv }), {
             retries: this.retries,
         });
         // GitHub forks are async - wait for the fork to be ready for git operations
-        await this.waitForForkReady(target, this.forkReadyTimeoutMs, this.forkPollIntervalMs, token);
+        await this.waitForForkReady(target, {
+            timeoutMs: this.forkReadyTimeoutMs,
+            pollMs: this.forkPollIntervalMs,
+            token,
+        });
         // Apply settings after fork (visibility, description, etc.)
         if (settings?.visibility || settings?.description) {
             await this.applyRepoSettings(target, settings, token);
@@ -210,7 +206,10 @@ export class GitHubLifecycleProvider {
      * Wait for a forked repo to become available via the GitHub API.
      * GitHub forks are created asynchronously; polls exists() with a timeout.
      */
-    async waitForForkReady(repoInfo, timeoutMs = FORK_READY_TIMEOUT_MS, intervalMs = FORK_POLL_INTERVAL_MS, token) {
+    async waitForForkReady(repoInfo, options) {
+        const timeoutMs = options?.timeoutMs ?? FORK_READY_TIMEOUT_MS;
+        const intervalMs = options?.pollMs ?? FORK_POLL_INTERVAL_MS;
+        const token = options?.token;
         const deadline = Date.now() + timeoutMs;
         while (Date.now() < deadline) {
             try {
@@ -219,8 +218,8 @@ export class GitHubLifecycleProvider {
                     return;
                 }
             }
-            catch {
-                // Ignore transient errors during polling
+            catch (error) {
+                logger.debug(`Polling fork readiness: ${toErrorMessage(error)}`);
             }
             const remaining = deadline - Date.now();
             if (remaining <= 0)
@@ -234,9 +233,9 @@ export class GitHubLifecycleProvider {
      * Apply settings to an existing repo using gh repo edit.
      */
     async applyRepoSettings(repoInfo, settings, token) {
-        const tokenPrefix = this.buildTokenPrefix(token);
+        const tokenEnv = buildTokenEnv(token);
         const parts = [
-            `${tokenPrefix}gh repo edit`,
+            "gh repo edit",
             escapeShellArg(`${repoInfo.owner}/${repoInfo.repo}`),
         ];
         if (settings.visibility) {
@@ -246,20 +245,20 @@ export class GitHubLifecycleProvider {
             parts.push("--description", escapeShellArg(settings.description));
         }
         const command = parts.join(" ");
-        await withRetry(() => this.executor.exec(command, this.cwd), {
+        await withRetry(() => this.executor.exec(command, this.cwd, { env: tokenEnv }), {
             retries: this.retries,
         });
     }
     async receiveMigration(repoInfo, sourceDir, settings, token) {
         this.assertGitHub(repoInfo);
-        const tokenPrefix = this.buildTokenPrefix(token);
+        const tokenEnv = buildTokenEnv(token);
         // Remove existing "origin" remote if present (e.g., from git clone --mirror).
         // gh repo create --source --push needs to set its own origin remote.
         try {
             await this.executor.exec(`git -C ${escapeShellArg(sourceDir)} remote remove origin`, this.cwd);
         }
-        catch {
-            // No origin remote — nothing to remove
+        catch (error) {
+            logger.debug(`Cleanup: remote remove origin skipped - ${toErrorMessage(error)}`);
         }
         // Remove all non-standard refs that GitHub rejects on push.
         // Mirror clones include ALL refs from the source, but GitHub only
@@ -276,8 +275,8 @@ export class GitHubLifecycleProvider {
                 }
             }
         }
-        catch {
-            // No refs to remove — ignore
+        catch (error) {
+            logger.debug(`Cleanup: ref cleanup skipped - ${toErrorMessage(error)}`);
         }
         // Rename default branch in mirror clone if requested.
         if (settings?.defaultBranch) {
@@ -297,7 +296,7 @@ export class GitHubLifecycleProvider {
         // For bare repos (from git clone --mirror), --push mirrors all refs.
         // This uses gh CLI authentication, avoiding raw git auth issues with GHE.
         const parts = [
-            `${tokenPrefix}gh repo create`,
+            "gh repo create",
             escapeShellArg(`${repoInfo.owner}/${repoInfo.repo}`),
             "--source",
             escapeShellArg(sourceDir),
@@ -325,7 +324,7 @@ export class GitHubLifecycleProvider {
             parts.push("--disable-wiki");
         }
         const command = parts.join(" ");
-        await withRetry(() => this.executor.exec(command, this.cwd), {
+        await withRetry(() => this.executor.exec(command, this.cwd, { env: tokenEnv }), {
             retries: this.retries,
         });
     }
@@ -334,12 +333,9 @@ export class GitHubLifecycleProvider {
      * GitHub automatically updates the default branch pointer.
      */
     async renameBranch(repoInfo, current, desired, token) {
-        const renameTokenPrefix = this.buildTokenPrefix(token);
-        const hostnameFlag = getHostnameFlag(repoInfo);
-        const hostnamePart = hostnameFlag ? `${hostnameFlag} ` : "";
-        const apiPath = `repos/${escapeShellArg(repoInfo.owner)}/${escapeShellArg(repoInfo.repo)}`;
-        await withRetry(() => this.executor.exec(`${renameTokenPrefix}gh api ${hostnamePart}${apiPath}/branches/${escapeShellArg(current)}/rename ` +
-            `--method POST -f new_name=${escapeShellArg(desired)}`, this.cwd), {
+        const { tokenEnv, prefix, apiPath } = this.buildGhApiPrefix(repoInfo, token);
+        await withRetry(() => this.executor.exec(`${prefix}${apiPath}/branches/${escapeShellArg(current)}/rename ` +
+            `--method POST -f new_name=${escapeShellArg(desired)}`, this.cwd, { env: tokenEnv }), {
             retries: this.retries,
         });
     }
@@ -351,21 +347,20 @@ export class GitHubLifecycleProvider {
      * The command arguments are constructed from trusted RepoInfo values
      * (validated during config parsing), not user input.
      */
-    async waitForDefaultBranch(repoInfo, expectedBranch, token, timeoutMs = 15000, pollMs = 1000) {
-        const tokenPrefix = this.buildTokenPrefix(token);
-        const hostnameFlag = getHostnameFlag(repoInfo);
-        const hostnamePart = hostnameFlag ? `${hostnameFlag} ` : "";
-        const apiPath = `repos/${escapeShellArg(repoInfo.owner)}/${escapeShellArg(repoInfo.repo)}`;
+    async waitForDefaultBranch(repoInfo, expectedBranch, options) {
+        const timeoutMs = options?.timeoutMs ?? 15000;
+        const pollMs = options?.pollMs ?? 1000;
+        const { tokenEnv, prefix, apiPath } = this.buildGhApiPrefix(repoInfo, options?.token);
         const startTime = Date.now();
         while (Date.now() - startTime < timeoutMs) {
             try {
-                const branch = (await this.executor.exec(`${tokenPrefix}gh api ${hostnamePart}${apiPath} --jq '.default_branch'`, this.cwd)).trim();
+                const branch = (await this.executor.exec(`${prefix}${apiPath} --jq '.default_branch'`, this.cwd, { env: tokenEnv })).trim();
                 if (branch === expectedBranch) {
                     return;
                 }
             }
-            catch {
-                // API call failed, continue polling
+            catch (error) {
+                logger.debug(`Polling default branch: ${toErrorMessage(error)}`);
             }
             await new Promise((resolve) => setTimeout(resolve, pollMs));
         }
@@ -377,24 +372,18 @@ export class GitHubLifecycleProvider {
      * commit) but no files, so xfg sync starts from a clean state.
      */
     async deleteReadme(repoInfo, token) {
-        const tokenPrefix = this.buildTokenPrefix(token);
-        const hostnameFlag = getHostnameFlag(repoInfo);
-        const hostnamePart = hostnameFlag ? `${hostnameFlag} ` : "";
-        const apiPath = `repos/${escapeShellArg(repoInfo.owner)}/${escapeShellArg(repoInfo.repo)}`;
-        // After repo creation, GitHub may return 404 due to eventual consistency.
-        // Exclude 404/not-found from permanent errors so withRetry retries them.
-        const postCreatePermanentPatterns = DEFAULT_PERMANENT_ERROR_PATTERNS.filter((p) => !p.test("404 Not Found"));
+        const { tokenEnv, prefix, apiPath } = this.buildGhApiPrefix(repoInfo, token);
         // Get the SHA of the README.md created by --add-readme
-        const fileInfo = await withRetry(() => this.executor.exec(`${tokenPrefix}gh api ${hostnamePart}${apiPath}/contents/README.md --jq '.sha'`, this.cwd), {
+        const fileInfo = await withRetry(() => this.executor.exec(`${prefix}${apiPath}/contents/README.md --jq '.sha'`, this.cwd, { env: tokenEnv }), {
             retries: this.retries,
-            permanentErrorPatterns: postCreatePermanentPatterns,
+            permanentErrorPatterns: POST_CREATE_PERMANENT_PATTERNS,
         });
         const sha = fileInfo.trim();
         // Delete the README.md to leave the repo clean
-        await withRetry(() => this.executor.exec(`${tokenPrefix}gh api ${hostnamePart}${apiPath}/contents/README.md ` +
-            `--method DELETE -f message='Remove initialization file' -f sha=${escapeShellArg(sha)}`, this.cwd), {
+        await withRetry(() => this.executor.exec(`${prefix}${apiPath}/contents/README.md ` +
+            `--method DELETE -f message='Remove initialization file' -f sha=${escapeShellArg(sha)}`, this.cwd, { env: tokenEnv }), {
             retries: this.retries,
-            permanentErrorPatterns: postCreatePermanentPatterns,
+            permanentErrorPatterns: POST_CREATE_PERMANENT_PATTERNS,
         });
     }
 }

package/dist/lifecycle/index.d.ts

@@ -1,7 +1,3 @@
-export type { LifecyclePlatform, LifecycleResult, LifecycleOptions, CreateRepoSettings, IRepoLifecycleProvider, IMigrationSource, IRepoLifecycleFactory, IRepoLifecycleManager, } from "./types.js";
-export { GitHubLifecycleProvider, type GitHubLifecycleProviderOptions, } from "./github-lifecycle-provider.js";
-export { AdoMigrationSource } from "./ado-migration-source.js";
-export { RepoLifecycleFactory } from "./repo-lifecycle-factory.js";
+export type { IRepoLifecycleManager } from "./types.js";
 export { RepoLifecycleManager } from "./repo-lifecycle-manager.js";
-export { formatLifecycleAction, type FormatOptions, } from "./lifecycle-formatter.js";
-export { runLifecycleCheck, toCreateRepoSettings, type LifecycleCheckOptions, type LifecycleCheckResult, } from "./lifecycle-helpers.js";
+export { runLifecycleCheck, toCreateRepoSettings, } from "./lifecycle-helpers.js";

package/dist/lifecycle/index.js

@@ -1,6 +1,2 @@
-export { GitHubLifecycleProvider, } from "./github-lifecycle-provider.js";
-export { AdoMigrationSource } from "./ado-migration-source.js";
-export { RepoLifecycleFactory } from "./repo-lifecycle-factory.js";
 export { RepoLifecycleManager } from "./repo-lifecycle-manager.js";
-export { formatLifecycleAction, } from "./lifecycle-formatter.js";
 export { runLifecycleCheck, toCreateRepoSettings, } from "./lifecycle-helpers.js";

package/dist/lifecycle/lifecycle-formatter.d.ts

@@ -1,5 +1,5 @@
 import type { LifecycleResult } from "./types.js";
-export interface FormatOptions {
+interface FormatOptions {
     upstream?: string;
     source?: string;
     settings?: {
@@ -12,3 +12,4 @@ export interface FormatOptions {
  * Returns empty array if action is "existed" (no output needed).
  */
 export declare function formatLifecycleAction(result: LifecycleResult, options?: FormatOptions): string[];
+export {};

package/dist/lifecycle/lifecycle-formatter.js

@@ -20,6 +20,10 @@ export function formatLifecycleAction(result, options) {
         case "migrated":
             lines.push(chalk.green(`+ MIGRATE ${options?.source ?? "source"} -> ${repoDisplay}`));
             break;
+        default: {
+            const _exhaustive = result.action;
+            throw new Error(`Unknown lifecycle action: ${_exhaustive}`);
+        }
     }
     // Add settings details if provided
     if (options?.settings) {

package/dist/lifecycle/lifecycle-helpers.d.ts

@@ -1,7 +1,7 @@
 import type { RepoConfig, GitHubRepoSettings } from "../config/types.js";
 import type { RepoInfo } from "../shared/repo-detector.js";
 import type { IRepoLifecycleManager, CreateRepoSettings, LifecycleResult } from "./types.js";
-export interface LifecycleCheckOptions {
+interface LifecycleCheckOptions {
     dryRun: boolean;
     /** Base work directory (combined with repoIndex to compute full path). */
     workDir?: string;
@@ -16,7 +16,7 @@ export interface LifecycleCheckOptions {
  * Extracts only the fields relevant for repo creation.
  */
 export declare function toCreateRepoSettings(repo: GitHubRepoSettings | undefined): CreateRepoSettings | undefined;
-export interface LifecycleCheckResult {
+interface LifecycleCheckResult {
     lifecycleResult: LifecycleResult;
     outputLines: string[];
 }
@@ -25,3 +25,4 @@ export interface LifecycleCheckResult {
  * Returns the lifecycle result and formatted output lines.
  */
 export declare function runLifecycleCheck(repoConfig: RepoConfig, repoInfo: RepoInfo, repoIndex: number, options: LifecycleCheckOptions, lifecycleManager: IRepoLifecycleManager, repoSettings?: GitHubRepoSettings): Promise<LifecycleCheckResult>;
+export {};

package/dist/lifecycle/repo-lifecycle-manager.js

@@ -2,6 +2,7 @@ import { join } from "node:path";
 import { rm } from "node:fs/promises";
 import { parseGitUrl } from "../shared/repo-detector.js";
 import { logger } from "../shared/logger.js";
+import { safeCleanup } from "../shared/type-guards.js";
 import { RepoLifecycleFactory } from "./repo-lifecycle-factory.js";
 /**
  * Orchestrates repo lifecycle operations before sync.
@@ -21,11 +22,11 @@ export class RepoLifecycleManager {
             if (repoConfig.upstream || repoConfig.source) {
                 throw error;
             }
-            // Platform doesn't support lifecycle operations yet - skip silently
+            // Platform doesn't support lifecycle operations yet - log and skip
+            logger.debug(`Lifecycle: skipping unsupported platform "${repoInfo.type}"`);
             return { repoInfo, action: "existed" };
         }
         const { token } = options;
-        // Check if repo exists
         const exists = await provider.exists(repoInfo, token);
         if (exists) {
             // Repo exists - nothing to do (ignore upstream/source)
@@ -72,7 +73,6 @@ export class RepoLifecycleManager {
         if (!provider.fork) {
             throw new Error(`Platform '${repoInfo.type}' does not support forking`);
         }
-        // Parse upstream URL to get repo info
         const upstreamInfo = parseGitUrl(repoConfig.upstream, {
             githubHosts: options.githubHosts,
         });
@@ -110,14 +110,7 @@ export class RepoLifecycleManager {
             };
         }
         finally {
-            // Clean up migration source directory
-            try {
-                await rm(sourceDir, { recursive: true, force: true });
-            }
-            catch (cleanupError) {
-                // Log cleanup errors at debug level for troubleshooting
-                logger.debug(`Failed to clean up migration source directory ${sourceDir}: ${cleanupError instanceof Error ? cleanupError.message : String(cleanupError)}`);
-            }
+            await safeCleanup(() => rm(sourceDir, { recursive: true, force: true }), `failed to remove ${sourceDir}`, logger);
         }
     }
     /**

package/dist/lifecycle/types.d.ts

@@ -8,22 +8,16 @@ export type LifecyclePlatform = "github" | "azure-devops" | "gitlab";
  * Result of a lifecycle operation.
  */
 export interface LifecycleResult {
-    /** The repo info (may be updated) */
     repoInfo: RepoInfo;
-    /** What action was taken */
     action: "existed" | "created" | "forked" | "migrated";
-    /** True if skipped due to dry-run */
     skipped?: boolean;
 }
 /**
  * Options for lifecycle operations.
  */
 export interface LifecycleOptions {
-    /** Dry-run mode - don't make changes */
     dryRun: boolean;
-    /** Working directory for git operations */
     workDir: string;
-    /** GitHub Enterprise hostnames for URL detection */
     githubHosts?: string[];
     /** Auth token (GitHub App installation token or PAT) for gh CLI commands */
     token?: string;
@@ -44,7 +38,6 @@ export interface CreateRepoSettings {
  * Implementations handle create/fork/receive for a specific platform.
  */
 export interface IRepoLifecycleProvider {
-    /** Platform this provider handles */
     readonly platform: LifecyclePlatform;
     /**
      * Check if a repository exists on this platform.
@@ -70,7 +63,6 @@ export interface IRepoLifecycleProvider {
  * Implementations handle cloning from a source platform.
  */
 export interface IMigrationSource {
-    /** Platform this source handles */
     readonly platform: LifecyclePlatform;
     /**
      * Clone repository with all refs for migration.

package/dist/output/github-summary.d.ts

@@ -46,4 +46,9 @@ export interface SummaryData {
 }
 export declare function formatSummary(data: SummaryData): string;
 export declare function isGitHubActions(): boolean;
+/**
+ * Append markdown content to GITHUB_STEP_SUMMARY.
+ * No-op outside GitHub Actions.
+ */
+export declare function writeGitHubStepSummary(markdown: string): void;
 export declare function writeSummary(data: SummaryData): void;

package/dist/output/github-summary.js

@@ -224,10 +224,17 @@ export function formatSummary(data) {
 export function isGitHubActions() {
     return !!process.env.GITHUB_STEP_SUMMARY;
 }
-export function writeSummary(data) {
+/**
+ * Append markdown content to GITHUB_STEP_SUMMARY.
+ * No-op outside GitHub Actions.
+ */
+export function writeGitHubStepSummary(markdown) {
     const summaryPath = process.env.GITHUB_STEP_SUMMARY;
     if (!summaryPath)
         return;
-    const markdown = formatSummary(data);
     appendFileSync(summaryPath, "\n" + markdown + "\n");
 }
+export function writeSummary(data) {
+    const markdown = formatSummary(data);
+    writeGitHubStepSummary(markdown);
+}

package/dist/output/index.d.ts

@@ -1,5 +1,5 @@
 export { formatSyncReportCLI, formatSyncReportMarkdown, writeSyncReportSummary, type SyncReport, type RepoFileChanges, type FileChange, } from "./sync-report.js";
-export { formatSettingsReportCLI, formatSettingsReportMarkdown, writeSettingsReportSummary, formatValuePlain, formatRulesetConfigPlain, type SettingsReport, type RepoChanges, type RulesetChange, type SettingChange, } from "./settings-report.js";
-export { formatUnifiedSummaryMarkdown, writeUnifiedSummary, type UnifiedSummaryInput, } from "./unified-summary.js";
+export { formatSettingsReportCLI, formatSettingsReportMarkdown, writeSettingsReportSummary, type SettingsReport, type RepoChanges, type RulesetChange, type SettingChange, } from "./settings-report.js";
+export { formatUnifiedSummaryMarkdown, writeUnifiedSummary, } from "./unified-summary.js";
 export { formatSummary, isGitHubActions, writeSummary, type MergeOutcome, type FileChanges, type RulesetPlanDetail, type RepoSettingsPlanDetail, type RepoResult, type SummaryData, } from "./github-summary.js";
 export { getMergeOutcome, toFileChanges, buildRepoResult, buildErrorResult, } from "./summary-utils.js";

package/dist/output/index.js

@@ -1,7 +1,7 @@
 // Sync report (repo-grouped file changes)
 export { formatSyncReportCLI, formatSyncReportMarkdown, writeSyncReportSummary, } from "./sync-report.js";
 // Settings report (repo-grouped settings changes)
-export { formatSettingsReportCLI, formatSettingsReportMarkdown, writeSettingsReportSummary, formatValuePlain, formatRulesetConfigPlain, } from "./settings-report.js";
+export { formatSettingsReportCLI, formatSettingsReportMarkdown, writeSettingsReportSummary, } from "./settings-report.js";
 // Unified summary (lifecycle + sync + settings in one diff block)
 export { formatUnifiedSummaryMarkdown, writeUnifiedSummary, } from "./unified-summary.js";
 // GitHub Actions summary

package/dist/output/lifecycle-report.js

@@ -1,9 +1,6 @@
 // src/output/lifecycle-report.ts
-import { appendFileSync } from "node:fs";
 import chalk from "chalk";
-// =============================================================================
-// Builder
-// =============================================================================
+import { writeGitHubStepSummary } from "./github-summary.js";
 export function buildLifecycleReport(results) {
     const actions = [];
     const totals = { created: 0, forked: 0, migrated: 0, existed: 0 };
@@ -19,10 +16,7 @@ export function buildLifecycleReport(results) {
     }
     return { actions, totals };
 }
-// =============================================================================
-// Helpers
-// =============================================================================
-function formatSummary(totals) {
+function formatLifecycleSummary(totals) {
     const total = totals.created + totals.forked + totals.migrated;
     if (total === 0) {
         return "No changes";
@@ -43,9 +37,6 @@ function formatSummary(totals) {
 export function hasLifecycleChanges(report) {
     return report.actions.some((a) => a.action !== "existed");
 }
-// =============================================================================
-// CLI Formatter
-// =============================================================================
 export function formatLifecycleReportCLI(report) {
     if (!hasLifecycleChanges(report)) {
         return [];
@@ -76,12 +67,9 @@ export function formatLifecycleReportCLI(report) {
     }
     lines.push("");
     // Summary
-    lines.push(formatSummary(report.totals));
+    lines.push(formatLifecycleSummary(report.totals));
     return lines;
 }
-// =============================================================================
-// Markdown Formatter
-// =============================================================================
 export function formatLifecycleReportMarkdown(report, dryRun) {
     if (!hasLifecycleChanges(report)) {
         return "";
@@ -129,18 +117,12 @@ export function formatLifecycleReportMarkdown(report, dryRun) {
         lines.push("");
     }
     // Summary
-    lines.push(`**${formatSummary(report.totals)}**`);
+    lines.push(`**${formatLifecycleSummary(report.totals)}**`);
     return lines.join("\n");
 }
-// =============================================================================
-// File Writer
-// =============================================================================
 export function writeLifecycleReportSummary(report, dryRun) {
-    const summaryPath = process.env.GITHUB_STEP_SUMMARY;
-    if (!summaryPath)
-        return;
     const markdown = formatLifecycleReportMarkdown(report, dryRun);
     if (!markdown)
         return;
-    appendFileSync(summaryPath, "\n" + markdown + "\n");
+    writeGitHubStepSummary(markdown);
 }