@cat-factory/integrations 0.6.0

package/dist/modules/github/GitHubService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubService.js","sourceRoot":"","sources":["../../../src/modules/github/GitHubService.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAyBjD,MAAM,OAAO,aAAa;IACK,IAAI;IAAjC,YAA6B,IAA+B;oBAA/B,IAAI;IAA8B,CAAC;IAEhE,4EAA4E;IAE5E,SAAS,CAAC,WAAmB;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC7D,CAAC;IAED,YAAY,CAAC,WAAmB,EAAE,YAAoB;QACpD,OAAO,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IACnF,CAAC;IAED,gBAAgB,CAAC,WAAmB;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;IAC/E,CAAC;IAED,UAAU,CAAC,WAAmB;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;IACzE,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,YAAY,CAChB,WAAmB,EACnB,YAAoB,EACpB,IAAY,EACZ,OAAe;QAEf,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAC7E,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QAC7E,MAAM,MAAM,GAAiB;YAC3B,YAAY;YACZ,IAAI;YACJ,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAChC,CAAA;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5E,OAAO,MAAM,CAAA;IACf,CAAC;IAED,KAAK,CAAC,WAAW,CACf,WAAmB,EACnB,YAAoB,EACpB,KAAuB;QAEvB,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;IACvE,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,YAAoB,EACpB,KAA2B;QAE3B,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAC7E,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,cAAc,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;QACnF,MAAM,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QAC7E,OAAO,EAAE,CAAA;IACX,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,WAAmB,EACnB,YAAoB,EACpB,MAAc,EACd,KAA6B;QAE7B,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAC7E,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAA;IACnF,CAAC;IAED,KAAK,CAAC,OAAO,CACX,WAAmB,EACnB,YAAoB,EACpB,eAAuB,EACvB,IAAY;QAEZ,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAC7E,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,CAAA;IAClF,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,YAAoB;QAC7D,MAAM,IAAI,GAAG,WAAW,CACtB,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,EACvE,YAAY,EACZ,MAAM,CAAC,YAAY,CAAC,CACrB,CAAA;QACD,OAAO;YACL,IAAI;YACJ,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;SAC5C,CAAA;IACH,CAAC;CACF"}

package/dist/modules/github/GitHubSyncService.d.ts

@@ -0,0 +1,97 @@
+import type { Clock } from '@cat-factory/kernel';
+import type { GitHubClient } from '@cat-factory/kernel';
+import type { BranchProjectionRepository, CheckRunProjectionRepository, CommitProjectionRepository, GitHubInstallationRepository, IssueProjectionRepository, PullRequestProjectionRepository, RepoProjectionRepository } from '@cat-factory/kernel';
+import type { GitHubAvailableRepo, GitHubRepo, RepoTreeEntry } from '@cat-factory/kernel';
+export interface GitHubSyncServiceDependencies {
+    githubClient: GitHubClient;
+    githubInstallationRepository: GitHubInstallationRepository;
+    repoProjectionRepository: RepoProjectionRepository;
+    branchProjectionRepository: BranchProjectionRepository;
+    pullRequestProjectionRepository: PullRequestProjectionRepository;
+    issueProjectionRepository: IssueProjectionRepository;
+    commitProjectionRepository: CommitProjectionRepository;
+    checkRunProjectionRepository: CheckRunProjectionRepository;
+    clock: Clock;
+    /**
+     * Bounds the initial commit backfill: when a repo has no commit cursor yet
+     * (its first sync), commits are listed only from `now - commitBackfillHorizonMs`
+     * rather than from the dawn of the repo. This keeps a large/monorepo connect
+     * from inserting its entire history in one step. Subsequent syncs use the
+     * (more recent) cursor. Undefined means backfill the full history (legacy).
+     */
+    commitBackfillHorizonMs?: number;
+}
+export declare class GitHubSyncService {
+    private readonly deps;
+    constructor(deps: GitHubSyncServiceDependencies);
+    /**
+     * The repos the workspace's installation can access, annotated with whether
+     * this workspace currently links each one. Repos are linked *explicitly* per
+     * workspace, so the connect UI lists these and the user picks a subset.
+     */
+    listAvailableRepos(workspaceId: string): Promise<GitHubAvailableRepo[]>;
+    /**
+     * Mark (or unmark) a repo as a monorepo (hosting several services, each pinned
+     * to a subdirectory). The flag is board-owned state on the projection. Lazily
+     * links the repo first if the workspace doesn't track it yet — the "add an
+     * existing repo as a service" flow flips this toggle before the repo is added,
+     * so it may not be linked. Throws only if the repo isn't accessible to the
+     * installation (the App hasn't been granted it).
+     */
+    setRepoMonorepo(workspaceId: string, repoGithubId: number, isMonorepo: boolean): Promise<GitHubRepo>;
+    /**
+     * List the entries of a directory (one level) in a tracked repo, on its default
+     * branch, so the monorepo service picker can browse the repo and pin a service to a
+     * subdirectory. `path` is repo-root-relative ('' = the root). Directories are
+     * returned first (the picker navigates into those), then files for context.
+     */
+    listRepoDirectory(workspaceId: string, repoGithubId: number, path?: string): Promise<RepoTreeEntry[]>;
+    /**
+     * Link a single repo into this workspace without disturbing the rest (unlike
+     * {@link setLinkedRepos}, which sets the exact set and tombstones the others).
+     * Projects + deep-syncs the repo the first time it's seen, and is a no-op that
+     * returns the live row when it's already tracked. Returns null when the repo is
+     * not accessible to the installation (the App hasn't been granted it yet) — the
+     * caller surfaces a "grant the App access" hint. Backs the "add an existing
+     * repo as a board service" flow, where the workspace may not link the repo yet.
+     */
+    linkRepo(workspaceId: string, repoGithubId: number): Promise<GitHubRepo | null>;
+    /**
+     * Set the exact set of repos this workspace links. Projects the newly selected
+     * repos (from those the installation can access), tombstones any deselected
+     * repo, then deep-syncs each linked repo. Returns the workspace's live repos.
+     */
+    setLinkedRepos(workspaceId: string, repoGithubIds: number[]): Promise<GitHubRepo[]>;
+    /**
+     * Run one incremental fetch→upsert→cursor cycle for a single resource kind.
+     * Reads the prior cursor, fetches (conditionally, via the prior ETag/`since`),
+     * upserts when there's anything new, then advances the cursor. The differences
+     * between resources (how the request is shaped and how the next cursor is
+     * derived) are supplied by the callbacks; the cursor bookkeeping is shared.
+     */
+    private syncResource;
+    /** Every workspace in the installation's org that actually links this repo. */
+    private linkedWorkspaces;
+    /**
+     * Incrementally resync one repo's branches, PRs, issues, commits and checks. The repo
+     * is fetched from GitHub ONCE (installation-scoped cursor) and each projection is fanned
+     * out to every workspace in the org that links it, so two teams sharing a repo cost one
+     * API round-trip, not two. Pass `full` (at link time) to bypass the shared cursor and
+     * fully populate a freshly-linked workspace.
+     */
+    syncRepo(repo: GitHubRepo, options?: {
+        full?: boolean;
+    }): Promise<void>;
+    /** Resync a single tracked repo by its GitHub id (used by the queue consumer). */
+    syncRepoById(workspaceId: string, repoGithubId: number): Promise<void>;
+    /** Incremental resync of every repo this workspace links. */
+    resyncWorkspace(workspaceId: string): Promise<void>;
+    /**
+     * Full backfill for an installation: deep-sync the linked repos of every
+     * workspace it backs (the connector workspace plus all workspaces in its
+     * account). Repos are linked explicitly, so backfill refreshes what's linked
+     * rather than rediscovering the whole installation.
+     */
+    backfillInstallation(installationId: number): Promise<void>;
+}
+//# sourceMappingURL=GitHubSyncService.d.ts.map

package/dist/modules/github/GitHubSyncService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubSyncService.d.ts","sourceRoot":"","sources":["../../../src/modules/github/GitHubSyncService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,KAAK,EAAE,YAAY,EAAiB,MAAM,qBAAqB,CAAA;AACtE,OAAO,KAAK,EACV,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,4BAA4B,EAC5B,yBAAyB,EACzB,+BAA+B,EAC/B,wBAAwB,EAGzB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,KAAK,EAAE,mBAAmB,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAczF,MAAM,WAAW,6BAA6B;IAC5C,YAAY,EAAE,YAAY,CAAA;IAC1B,4BAA4B,EAAE,4BAA4B,CAAA;IAC1D,wBAAwB,EAAE,wBAAwB,CAAA;IAClD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD,+BAA+B,EAAE,+BAA+B,CAAA;IAChE,yBAAyB,EAAE,yBAAyB,CAAA;IACpD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD,4BAA4B,EAAE,4BAA4B,CAAA;IAC1D,KAAK,EAAE,KAAK,CAAA;IACZ;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;CACjC;AAED,qBAAa,iBAAiB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,6BAA6B,EAAI;IAEpE;;;;OAIG;IACG,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAkB5E;IAED;;;;;;;OAOG;IACG,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,OAAO,GAClB,OAAO,CAAC,UAAU,CAAC,CAOrB;IAED;;;;;OAKG;IACG,iBAAiB,CACrB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,IAAI,SAAK,GACR,OAAO,CAAC,aAAa,EAAE,CAAC,CAyB1B;IAED;;;;;;;;OAQG;IACG,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAepF;IAED;;;;OAIG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAuBxF;IAED;;;;;;OAMG;YACW,YAAY;IA+B1B,+EAA+E;YACjE,gBAAgB;IAO9B;;;;;;OAMG;IACG,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAsGhF;IAED,kFAAkF;IAC5E,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG3E;IAED,6DAA6D;IACvD,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGxD;IAED;;;;;OAKG;IACG,oBAAoB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOhE;CACF"}

package/dist/modules/github/GitHubSyncService.js

@@ -0,0 +1,241 @@
+export class GitHubSyncService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /**
+     * The repos the workspace's installation can access, annotated with whether
+     * this workspace currently links each one. Repos are linked *explicitly* per
+     * workspace, so the connect UI lists these and the user picks a subset.
+     */
+    async listAvailableRepos(workspaceId) {
+        const installation = await this.deps.githubInstallationRepository.getByWorkspace(workspaceId);
+        if (!installation || installation.deletedAt)
+            return [];
+        const { items } = await this.deps.githubClient.listInstallationRepos(installation.installationId);
+        const tracked = new Map((await this.deps.repoProjectionRepository.list(workspaceId)).map((r) => [r.githubId, r]));
+        return items.map((r) => ({
+            githubId: r.githubId,
+            owner: r.owner,
+            name: r.name,
+            defaultBranch: r.defaultBranch,
+            private: r.private,
+            linked: tracked.has(r.githubId),
+            isMonorepo: tracked.get(r.githubId)?.isMonorepo ?? false,
+        }));
+    }
+    /**
+     * Mark (or unmark) a repo as a monorepo (hosting several services, each pinned
+     * to a subdirectory). The flag is board-owned state on the projection. Lazily
+     * links the repo first if the workspace doesn't track it yet — the "add an
+     * existing repo as a service" flow flips this toggle before the repo is added,
+     * so it may not be linked. Throws only if the repo isn't accessible to the
+     * installation (the App hasn't been granted it).
+     */
+    async setRepoMonorepo(workspaceId, repoGithubId, isMonorepo) {
+        const existing = await this.linkRepo(workspaceId, repoGithubId);
+        if (!existing) {
+            throw new Error(`Repo ${repoGithubId} is not accessible to workspace '${workspaceId}'`);
+        }
+        await this.deps.repoProjectionRepository.setMonorepo(workspaceId, repoGithubId, isMonorepo);
+        return { ...existing, isMonorepo };
+    }
+    /**
+     * List the entries of a directory (one level) in a tracked repo, on its default
+     * branch, so the monorepo service picker can browse the repo and pin a service to a
+     * subdirectory. `path` is repo-root-relative ('' = the root). Directories are
+     * returned first (the picker navigates into those), then files for context.
+     */
+    async listRepoDirectory(workspaceId, repoGithubId, path = '') {
+        const installation = await this.deps.githubInstallationRepository.getByWorkspace(workspaceId);
+        if (!installation || installation.deletedAt)
+            return [];
+        // Lazily link the repo if the workspace doesn't track it yet (the add-service
+        // flow browses the tree before the repo is added), same as setRepoMonorepo.
+        const repo = await this.linkRepo(workspaceId, repoGithubId);
+        if (!repo) {
+            throw new Error(`Repo ${repoGithubId} is not accessible to workspace '${workspaceId}'`);
+        }
+        const entries = await this.deps.githubClient.listDirectory(installation.installationId, { owner: repo.owner, repo: repo.name }, path.replace(/^\/+|\/+$/g, ''), repo.defaultBranch ?? undefined);
+        const mapped = entries.map((e) => ({
+            path: e.path,
+            name: e.name,
+            type: e.type,
+        }));
+        return mapped.sort((a, b) => {
+            if (a.type === 'dir' && b.type !== 'dir')
+                return -1;
+            if (a.type !== 'dir' && b.type === 'dir')
+                return 1;
+            return a.name.localeCompare(b.name);
+        });
+    }
+    /**
+     * Link a single repo into this workspace without disturbing the rest (unlike
+     * {@link setLinkedRepos}, which sets the exact set and tombstones the others).
+     * Projects + deep-syncs the repo the first time it's seen, and is a no-op that
+     * returns the live row when it's already tracked. Returns null when the repo is
+     * not accessible to the installation (the App hasn't been granted it yet) — the
+     * caller surfaces a "grant the App access" hint. Backs the "add an existing
+     * repo as a board service" flow, where the workspace may not link the repo yet.
+     */
+    async linkRepo(workspaceId, repoGithubId) {
+        const existing = await this.deps.repoProjectionRepository.get(workspaceId, repoGithubId);
+        if (existing)
+            return existing;
+        const installation = await this.deps.githubInstallationRepository.getByWorkspace(workspaceId);
+        if (!installation || installation.deletedAt)
+            return null;
+        const installationId = installation.installationId;
+        const { items } = await this.deps.githubClient.listInstallationRepos(installationId);
+        const match = items.find((r) => r.githubId === repoGithubId);
+        if (!match)
+            return null;
+        const repo = { ...match, installationId, syncedAt: this.deps.clock.now() };
+        await this.deps.repoProjectionRepository.upsertMany(workspaceId, [repo]);
+        // Full pass: the org cursor may already be advanced, so bypass it to populate this
+        // newly-linked workspace.
+        await this.syncRepo(repo, { full: true });
+        return this.deps.repoProjectionRepository.get(workspaceId, repoGithubId);
+    }
+    /**
+     * Set the exact set of repos this workspace links. Projects the newly selected
+     * repos (from those the installation can access), tombstones any deselected
+     * repo, then deep-syncs each linked repo. Returns the workspace's live repos.
+     */
+    async setLinkedRepos(workspaceId, repoGithubIds) {
+        const installation = await this.deps.githubInstallationRepository.getByWorkspace(workspaceId);
+        if (!installation || installation.deletedAt)
+            return [];
+        const installationId = installation.installationId;
+        const wanted = new Set(repoGithubIds);
+        const { items } = await this.deps.githubClient.listInstallationRepos(installationId);
+        const selected = items
+            .filter((r) => wanted.has(r.githubId))
+            .map((r) => ({ ...r, installationId, syncedAt: this.deps.clock.now() }));
+        if (selected.length > 0) {
+            await this.deps.repoProjectionRepository.upsertMany(workspaceId, selected);
+        }
+        // Tombstone every previously-linked repo for this installation that is no
+        // longer selected (the "seen" set is exactly the new selection).
+        await this.deps.repoProjectionRepository.tombstoneMissing(workspaceId, installationId, selected.map((r) => r.githubId), this.deps.clock.now());
+        for (const repo of selected)
+            await this.syncRepo(repo, { full: true });
+        return this.deps.repoProjectionRepository.list(workspaceId);
+    }
+    /**
+     * Run one incremental fetch→upsert→cursor cycle for a single resource kind.
+     * Reads the prior cursor, fetches (conditionally, via the prior ETag/`since`),
+     * upserts when there's anything new, then advances the cursor. The differences
+     * between resources (how the request is shaped and how the next cursor is
+     * derived) are supplied by the callbacks; the cursor bookkeeping is shared.
+     */
+    async syncResource(installationId, repoGithubId, kind, full, fetch, upsert, nextCursor) {
+        const repos = this.deps.repoProjectionRepository;
+        // The cursor is installation-scoped (shared across the org's workspaces). A `full`
+        // pass ignores it (treats it as empty) so a newly-linked workspace gets fully
+        // populated even though the org's cursor is already advanced.
+        const cursor = full ? null : await repos.getCursor(installationId, repoGithubId, kind);
+        const res = await fetch(cursor);
+        if (!res.notModified && res.items.length > 0)
+            await upsert(res.items);
+        await repos.setCursor(installationId, repoGithubId, kind, nextCursor(cursor, res.etag, this.deps.clock.now()));
+        return res;
+    }
+    /** Every workspace in the installation's org that actually links this repo. */
+    async linkedWorkspaces(installationId, repoGithubId) {
+        const all = await this.deps.githubInstallationRepository.listWorkspacesForInstallation(installationId);
+        // One batched query for the whole org, instead of a `get` per workspace.
+        return this.deps.repoProjectionRepository.linkedWorkspaces(repoGithubId, all);
+    }
+    /**
+     * Incrementally resync one repo's branches, PRs, issues, commits and checks. The repo
+     * is fetched from GitHub ONCE (installation-scoped cursor) and each projection is fanned
+     * out to every workspace in the org that links it, so two teams sharing a repo cost one
+     * API round-trip, not two. Pass `full` (at link time) to bypass the shared cursor and
+     * fully populate a freshly-linked workspace.
+     */
+    async syncRepo(repo, options = {}) {
+        const full = options.full ?? false;
+        const ref = { owner: repo.owner, repo: repo.name };
+        const id = repo.githubId;
+        const installationId = repo.installationId;
+        const client = this.deps.githubClient;
+        const workspaces = await this.linkedWorkspaces(installationId, id);
+        const fanOut = async (apply) => {
+            for (const ws of workspaces)
+                await apply(ws);
+        };
+        // ETag-conditional cursor: carry the prior ETag forward when the fetch
+        // returns none. PRs/issues (`stampSince`) additionally record a fresh
+        // `sinceIso` lower bound for the next delta; branches don't paginate by date.
+        const etagCursor = (stampSince) => (prev, etag, now) => ({
+            etag: etag ?? prev?.etag ?? null,
+            lastSyncedAt: now,
+            sinceIso: stampSince ? new Date(now).toISOString() : null,
+        });
+        // Branches — conditional GET via ETag.
+        const branches = await this.syncResource(installationId, id, 'branches', full, (cursor) => client.listBranches(installationId, ref, cursor?.etag ?? undefined), (items) => fanOut((ws) => this.deps.branchProjectionRepository.upsertMany(ws, items)), etagCursor(false));
+        const defaultBranchSha = branches.items.find((b) => b.name === repo.defaultBranch)?.headSha ?? null;
+        // Pull requests — delta by `since` (GitHub's updated_at lower bound).
+        await this.syncResource(installationId, id, 'pulls', full, (cursor) => client.listPullRequests(installationId, ref, {
+            since: cursor?.sinceIso ?? undefined,
+            etag: cursor?.etag ?? undefined,
+        }), (items) => fanOut((ws) => this.deps.pullRequestProjectionRepository.upsertMany(ws, items)), etagCursor(true));
+        // Issues — delta by `since`.
+        await this.syncResource(installationId, id, 'issues', full, (cursor) => client.listIssues(installationId, ref, {
+            since: cursor?.sinceIso ?? undefined,
+            etag: cursor?.etag ?? undefined,
+        }), (items) => fanOut((ws) => this.deps.issueProjectionRepository.upsertMany(ws, items)), etagCursor(true));
+        // Commits — delta by `since` on the default branch. On the first sync there
+        // is no cursor, so fall back to the backfill horizon (if configured) instead
+        // of fetching the repo's entire commit history in one step.
+        const commitBackfillSince = this.deps.commitBackfillHorizonMs !== undefined
+            ? new Date(this.deps.clock.now() - this.deps.commitBackfillHorizonMs).toISOString()
+            : undefined;
+        await this.syncResource(installationId, id, 'commits', full, (cursor) => client.listCommits(installationId, ref, {
+            since: cursor?.sinceIso ?? commitBackfillSince,
+        }), (items) => fanOut((ws) => this.deps.commitProjectionRepository.upsertMany(ws, items)), (_prev, _etag, now) => ({
+            etag: null,
+            lastSyncedAt: now,
+            sinceIso: new Date(now).toISOString(),
+        }));
+        // Check runs for the default-branch head (CI gating signal). Not cursor-based.
+        if (defaultBranchSha) {
+            const checks = await client.listCheckRuns(installationId, ref, defaultBranchSha);
+            if (checks.items.length > 0) {
+                await fanOut((ws) => this.deps.checkRunProjectionRepository.upsertMany(ws, checks.items));
+            }
+        }
+        // Stamp the repo row as freshly synced for every workspace that links it.
+        const now = this.deps.clock.now();
+        await fanOut((ws) => this.deps.repoProjectionRepository.upsertMany(ws, [{ ...repo, syncedAt: now }]));
+    }
+    /** Resync a single tracked repo by its GitHub id (used by the queue consumer). */
+    async syncRepoById(workspaceId, repoGithubId) {
+        const repo = await this.deps.repoProjectionRepository.get(workspaceId, repoGithubId);
+        if (repo)
+            await this.syncRepo(repo);
+    }
+    /** Incremental resync of every repo this workspace links. */
+    async resyncWorkspace(workspaceId) {
+        const repos = await this.deps.repoProjectionRepository.list(workspaceId);
+        for (const repo of repos)
+            await this.syncRepo(repo);
+    }
+    /**
+     * Full backfill for an installation: deep-sync the linked repos of every
+     * workspace it backs (the connector workspace plus all workspaces in its
+     * account). Repos are linked explicitly, so backfill refreshes what's linked
+     * rather than rediscovering the whole installation.
+     */
+    async backfillInstallation(installationId) {
+        const installation = await this.deps.githubInstallationRepository.getByInstallationId(installationId);
+        if (!installation || installation.deletedAt)
+            return;
+        const workspaceIds = await this.deps.githubInstallationRepository.listWorkspacesForInstallation(installationId);
+        for (const ws of workspaceIds)
+            await this.resyncWorkspace(ws);
+    }
+}
+//# sourceMappingURL=GitHubSyncService.js.map

package/dist/modules/github/GitHubSyncService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitHubSyncService.js","sourceRoot":"","sources":["../../../src/modules/github/GitHubSyncService.ts"],"names":[],"mappings":"AA+CA,MAAM,OAAO,iBAAiB;IACC,IAAI;IAAjC,YAA6B,IAAmC;oBAAnC,IAAI;IAAkC,CAAC;IAEpE;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,WAAmB;QAC1C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QAC7F,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,SAAS;YAAE,OAAO,EAAE,CAAA;QACtD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAClE,YAAY,CAAC,cAAc,CAC5B,CAAA;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CACzF,CAAA;QACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC/B,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,UAAU,IAAI,KAAK;SACzD,CAAC,CAAC,CAAA;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CACnB,WAAmB,EACnB,YAAoB,EACpB,UAAmB;QAEnB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAC/D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,QAAQ,YAAY,oCAAoC,WAAW,GAAG,CAAC,CAAA;QACzF,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,CAAC,CAAA;QAC3F,OAAO,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,CAAA;IACpC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CACrB,WAAmB,EACnB,YAAoB,EACpB,IAAI,GAAG,EAAE;QAET,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QAC7F,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,SAAS;YAAE,OAAO,EAAE,CAAA;QACtD,8EAA8E;QAC9E,4EAA4E;QAC5E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,QAAQ,YAAY,oCAAoC,WAAW,GAAG,CAAC,CAAA;QACzF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CACxD,YAAY,CAAC,cAAc,EAC3B,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACtC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAC9B,IAAI,CAAC,aAAa,IAAI,SAAS,CAChC,CAAA;QACD,MAAM,MAAM,GAAoB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC,CAAA;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;gBAAE,OAAO,CAAC,CAAC,CAAA;YACnD,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;gBAAE,OAAO,CAAC,CAAA;YAClD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,QAAQ,CAAC,WAAmB,EAAE,YAAoB;QACtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QACxF,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAA;QAC7B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QAC7F,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,SAAS;YAAE,OAAO,IAAI,CAAA;QACxD,MAAM,cAAc,GAAG,YAAY,CAAC,cAAc,CAAA;QAClD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAA;QACpF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAA;QAC5D,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAA;QACvB,MAAM,IAAI,GAAe,EAAE,GAAG,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAA;QACtF,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;QACxE,mFAAmF;QACnF,0BAA0B;QAC1B,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;IAC1E,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB,EAAE,aAAuB;QAC/D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QAC7F,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,SAAS;YAAE,OAAO,EAAE,CAAA;QACtD,MAAM,cAAc,GAAG,YAAY,CAAC,cAAc,CAAA;QAClD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAA;QACrC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAA;QACpF,MAAM,QAAQ,GAAG,KAAK;aACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;aACrC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAA;QAE1E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;QAC5E,CAAC;QACD,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,gBAAgB,CACvD,WAAW,EACX,cAAc,EACd,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CACtB,CAAA;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACtE,OAAO,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC7D,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,YAAY,CACxB,cAAsB,EACtB,YAAoB,EACpB,IAAoB,EACpB,IAAa,EACb,KAEyE,EACzE,MAAqC,EACrC,UAIe;QAEf,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAA;QAChD,mFAAmF;QACnF,8EAA8E;QAC9E,8DAA8D;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;QACtF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;QAC/B,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACrE,MAAM,KAAK,CAAC,SAAS,CACnB,cAAc,EACd,YAAY,EACZ,IAAI,EACJ,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CACpD,CAAA;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,+EAA+E;IACvE,KAAK,CAAC,gBAAgB,CAAC,cAAsB,EAAE,YAAoB;QACzE,MAAM,GAAG,GACP,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,6BAA6B,CAAC,cAAc,CAAC,CAAA;QAC5F,yEAAyE;QACzE,OAAO,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;IAC/E,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CAAC,IAAgB,EAAE,OAAO,GAAuB,EAAE;QAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,CAAA;QAClC,MAAM,GAAG,GAAkB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAA;QACjE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAA;QACxB,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAA;QACrC,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;QAClE,MAAM,MAAM,GAAG,KAAK,EAAE,KAAoC,EAAE,EAAE;YAC5D,KAAK,MAAM,EAAE,IAAI,UAAU;gBAAE,MAAM,KAAK,CAAC,EAAE,CAAC,CAAA;QAC9C,CAAC,CAAA;QAED,uEAAuE;QACvE,sEAAsE;QACtE,8EAA8E;QAC9E,MAAM,UAAU,GACd,CAAC,UAAmB,EAAE,EAAE,CACxB,CAAC,IAAuB,EAAE,IAA+B,EAAE,GAAW,EAAc,EAAE,CAAC,CAAC;YACtF,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI;YAChC,YAAY,EAAE,GAAG;YACjB,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;SAC1D,CAAC,CAAA;QAEJ,uCAAuC;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CACtC,cAAc,EACd,EAAE,EACF,UAAU,EACV,IAAI,EACJ,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,IAAI,SAAS,CAAC,EAC/E,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EACrF,UAAU,CAAC,KAAK,CAAC,CAClB,CAAA;QACD,MAAM,gBAAgB,GACpB,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,aAAa,CAAC,EAAE,OAAO,IAAI,IAAI,CAAA;QAE5E,sEAAsE;QACtE,MAAM,IAAI,CAAC,YAAY,CACrB,cAAc,EACd,EAAE,EACF,OAAO,EACP,IAAI,EACJ,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,gBAAgB,CAAC,cAAc,EAAE,GAAG,EAAE;YAC3C,KAAK,EAAE,MAAM,EAAE,QAAQ,IAAI,SAAS;YACpC,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,SAAS;SAChC,CAAC,EACJ,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EAC1F,UAAU,CAAC,IAAI,CAAC,CACjB,CAAA;QAED,6BAA6B;QAC7B,MAAM,IAAI,CAAC,YAAY,CACrB,cAAc,EACd,EAAE,EACF,QAAQ,EACR,IAAI,EACJ,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,UAAU,CAAC,cAAc,EAAE,GAAG,EAAE;YACrC,KAAK,EAAE,MAAM,EAAE,QAAQ,IAAI,SAAS;YACpC,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,SAAS;SAChC,CAAC,EACJ,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EACpF,UAAU,CAAC,IAAI,CAAC,CACjB,CAAA;QAED,4EAA4E;QAC5E,6EAA6E;QAC7E,4DAA4D;QAC5D,MAAM,mBAAmB,GACvB,IAAI,CAAC,IAAI,CAAC,uBAAuB,KAAK,SAAS;YAC7C,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,WAAW,EAAE;YACnF,CAAC,CAAC,SAAS,CAAA;QACf,MAAM,IAAI,CAAC,YAAY,CACrB,cAAc,EACd,EAAE,EACF,SAAS,EACT,IAAI,EACJ,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,EAAE;YACtC,KAAK,EAAE,MAAM,EAAE,QAAQ,IAAI,mBAAmB;SAC/C,CAAC,EACJ,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EACrF,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YACtB,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,GAAG;YACjB,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;SACtC,CAAC,CACH,CAAA;QAED,+EAA+E;QAC/E,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,cAAc,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAA;YAChF,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;YAC3F,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;QACjC,MAAM,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAClB,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAChF,CAAA;IACH,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,YAAY,CAAC,WAAmB,EAAE,YAAoB;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QACpF,IAAI,IAAI;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,eAAe,CAAC,WAAmB;QACvC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACxE,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACrD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,oBAAoB,CAAC,cAAsB;QAC/C,MAAM,YAAY,GAChB,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAA;QAClF,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,SAAS;YAAE,OAAM;QACnD,MAAM,YAAY,GAChB,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,6BAA6B,CAAC,cAAc,CAAC,CAAA;QAC5F,KAAK,MAAM,EAAE,IAAI,YAAY;YAAE,MAAM,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAA;IAC/D,CAAC;CACF"}

package/dist/modules/github/RepoProvisioningService.d.ts

@@ -0,0 +1,26 @@
+import type { CreateRepoInput, GitHubProvisioningClient, ProvisionedRepo } from '@cat-factory/kernel';
+/** Why a repo wasn't created directly (informational; the caller delegates regardless). */
+export type DelegationReason = 'insufficient_permissions' | 'forbidden' | 'already_exists';
+export type ProvisionResult = {
+    status: 'created';
+    repo: ProvisionedRepo;
+} | {
+    status: 'delegated';
+    reason: DelegationReason;
+};
+export interface RepoProvisioningServiceDependencies {
+    /** Mints tokens for the installation's owning App (the registry resolver). */
+    client: GitHubProvisioningClient;
+}
+export declare class RepoProvisioningService {
+    private readonly deps;
+    constructor(deps: RepoProvisioningServiceDependencies);
+    /**
+     * Create `input.name` under `input.org` using `installationId`'s credentials.
+     * Guards proactively on the installation's *granted* permissions (skips a
+     * guaranteed-403 round trip); a live 403 or a 422 "already exists" also resolve
+     * to `delegated` so the caller's manual/existing-repo path takes over.
+     */
+    provision(installationId: number, input: CreateRepoInput): Promise<ProvisionResult>;
+}
+//# sourceMappingURL=RepoProvisioningService.d.ts.map

package/dist/modules/github/RepoProvisioningService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RepoProvisioningService.d.ts","sourceRoot":"","sources":["../../../src/modules/github/RepoProvisioningService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,wBAAwB,EACxB,eAAe,EAChB,MAAM,qBAAqB,CAAA;AAU5B,2FAA2F;AAC3F,MAAM,MAAM,gBAAgB,GACxB,0BAA0B,GAC1B,WAAW,GACX,gBAAgB,CAAA;AAEpB,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,eAAe,CAAA;CAAE,GAC5C;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAAA;AAErD,MAAM,WAAW,mCAAmC;IAClD,8EAA8E;IAC9E,MAAM,EAAE,wBAAwB,CAAA;CACjC;AAOD,qBAAa,uBAAuB;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,mCAAmC,EAAI;IAE1E;;;;;OAKG;IACG,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAexF;CACF"}

package/dist/modules/github/RepoProvisioningService.js

@@ -0,0 +1,36 @@
+import { canCreateRepo } from './provisioning.logic.js';
+/** Sniff an HTTP status without coupling to a specific error class. */
+function statusOf(err) {
+    return err?.status;
+}
+export class RepoProvisioningService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /**
+     * Create `input.name` under `input.org` using `installationId`'s credentials.
+     * Guards proactively on the installation's *granted* permissions (skips a
+     * guaranteed-403 round trip); a live 403 or a 422 "already exists" also resolve
+     * to `delegated` so the caller's manual/existing-repo path takes over.
+     */
+    async provision(installationId, input) {
+        const permissions = await this.deps.client.getGrantedPermissions(installationId);
+        if (!canCreateRepo(permissions)) {
+            return { status: 'delegated', reason: 'insufficient_permissions' };
+        }
+        try {
+            const repo = await this.deps.client.createRepoInOrg(installationId, input);
+            return { status: 'created', repo };
+        }
+        catch (err) {
+            const status = statusOf(err);
+            if (status === 403)
+                return { status: 'delegated', reason: 'forbidden' };
+            if (status === 422)
+                return { status: 'delegated', reason: 'already_exists' };
+            throw err;
+        }
+    }
+}
+//# sourceMappingURL=RepoProvisioningService.js.map

package/dist/modules/github/RepoProvisioningService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RepoProvisioningService.js","sourceRoot":"","sources":["../../../src/modules/github/RepoProvisioningService.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAwBvD,uEAAuE;AACvE,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAQ,GAAkC,EAAE,MAAM,CAAA;AACpD,CAAC;AAED,MAAM,OAAO,uBAAuB;IACL,IAAI;IAAjC,YAA6B,IAAyC;oBAAzC,IAAI;IAAwC,CAAC;IAE1E;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,cAAsB,EAAE,KAAsB;QAC5D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,cAAc,CAAC,CAAA;QAChF,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAA;QACpE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;YAC1E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAA;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;YACvE,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;YAC5E,MAAM,GAAG,CAAA;QACX,CAAC;IACH,CAAC;CACF"}

package/dist/modules/github/WebhookService.d.ts

@@ -0,0 +1,28 @@
+import type { Clock } from '@cat-factory/kernel';
+import type { BranchProjectionRepository, CheckRunProjectionRepository, CommitProjectionRepository, GitHubInstallationRepository, IssueProjectionRepository, PullRequestProjectionRepository, RepoProjectionRepository } from '@cat-factory/kernel';
+export interface WebhookServiceDependencies {
+    githubInstallationRepository: GitHubInstallationRepository;
+    repoProjectionRepository: RepoProjectionRepository;
+    branchProjectionRepository: BranchProjectionRepository;
+    pullRequestProjectionRepository: PullRequestProjectionRepository;
+    issueProjectionRepository: IssueProjectionRepository;
+    commitProjectionRepository: CommitProjectionRepository;
+    checkRunProjectionRepository: CheckRunProjectionRepository;
+    clock: Clock;
+}
+export declare class WebhookService {
+    private readonly deps;
+    constructor(deps: WebhookServiceDependencies);
+    /** Apply a verified webhook delivery to the local projections. */
+    handle(eventName: string, payload: unknown): Promise<void>;
+    /**
+     * Apply `project` to every workspace backed by this installation that actually
+     * links the affected repo. Since repos are linked explicitly per workspace, an
+     * event for a repo only updates the boards that chose to track it.
+     */
+    private forEachLinkedWorkspace;
+    private handleInstallation;
+    private installationIdOf;
+    private repoIdOf;
+}
+//# sourceMappingURL=WebhookService.d.ts.map

package/dist/modules/github/WebhookService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebhookService.d.ts","sourceRoot":"","sources":["../../../src/modules/github/WebhookService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,KAAK,EACV,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,4BAA4B,EAC5B,yBAAyB,EACzB,+BAA+B,EAC/B,wBAAwB,EACzB,MAAM,qBAAqB,CAAA;AAyB5B,MAAM,WAAW,0BAA0B;IACzC,4BAA4B,EAAE,4BAA4B,CAAA;IAC1D,wBAAwB,EAAE,wBAAwB,CAAA;IAClD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD,+BAA+B,EAAE,+BAA+B,CAAA;IAChE,yBAAyB,EAAE,yBAAyB,CAAA;IACpD,0BAA0B,EAAE,0BAA0B,CAAA;IACtD,4BAA4B,EAAE,4BAA4B,CAAA;IAC1D,KAAK,EAAE,KAAK,CAAA;CACb;AAQD,qBAAa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,0BAA0B,EAAI;IAEjE,kEAAkE;IAC5D,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAmF/D;IAED;;;;OAIG;YACW,sBAAsB;YAatB,kBAAkB;IAgDhC,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,QAAQ;CAKjB"}

package/dist/modules/github/WebhookService.js

@@ -0,0 +1,156 @@
+import { pullRepoGithubId, toCheckRunProjection, toCommitProjection, toIssueProjection, toPullRequestProjection, } from './projection.logic.js';
+function asObject(value) {
+    return typeof value === 'object' && value !== null ? value : null;
+}
+export class WebhookService {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /** Apply a verified webhook delivery to the local projections. */
+    async handle(eventName, payload) {
+        const root = asObject(payload);
+        if (!root)
+            return;
+        if (eventName === 'installation' || eventName === 'installation_repositories') {
+            await this.handleInstallation(eventName, root);
+            return;
+        }
+        const installationId = this.installationIdOf(root);
+        if (installationId === null)
+            return;
+        const installation = await this.deps.githubInstallationRepository.getByInstallationId(installationId);
+        if (!installation || installation.deletedAt)
+            return;
+        const now = this.deps.clock.now();
+        switch (eventName) {
+            case 'pull_request': {
+                const pr = asObject(root.pull_request);
+                if (!pr)
+                    return;
+                const repoId = pullRepoGithubId(pr) ?? this.repoIdOf(root);
+                if (repoId === null)
+                    return;
+                await this.forEachLinkedWorkspace(installationId, repoId, (ws) => this.deps.pullRequestProjectionRepository.upsertMany(ws, [
+                    toPullRequestProjection(pr, repoId, now),
+                ]));
+                return;
+            }
+            case 'issues': {
+                const issue = asObject(root.issue);
+                const repoId = this.repoIdOf(root);
+                if (!issue || repoId === null)
+                    return;
+                await this.forEachLinkedWorkspace(installationId, repoId, (ws) => this.deps.issueProjectionRepository.upsertMany(ws, [
+                    toIssueProjection(issue, repoId, now),
+                ]));
+                return;
+            }
+            case 'push': {
+                const repoId = this.repoIdOf(root);
+                if (repoId === null)
+                    return;
+                // Update the pushed branch head and project the new commits.
+                const ref = typeof root.ref === 'string' ? root.ref : '';
+                const after = typeof root.after === 'string' ? root.after : '';
+                const commits = Array.isArray(root.commits) ? root.commits : [];
+                await this.forEachLinkedWorkspace(installationId, repoId, async (ws) => {
+                    if (ref.startsWith('refs/heads/') && after) {
+                        await this.deps.branchProjectionRepository.upsertMany(ws, [
+                            {
+                                repoGithubId: repoId,
+                                name: ref.slice('refs/heads/'.length),
+                                headSha: after,
+                                protected: false,
+                                syncedAt: now,
+                            },
+                        ]);
+                    }
+                    if (commits.length > 0) {
+                        await this.deps.commitProjectionRepository.upsertMany(ws, commits.map((c) => toCommitProjection(c, repoId, now)));
+                    }
+                });
+                return;
+            }
+            case 'check_run': {
+                const check = asObject(root.check_run);
+                const repoId = this.repoIdOf(root);
+                if (!check || repoId === null)
+                    return;
+                await this.forEachLinkedWorkspace(installationId, repoId, (ws) => this.deps.checkRunProjectionRepository.upsertMany(ws, [
+                    toCheckRunProjection(check, repoId, now),
+                ]));
+                return;
+            }
+            default:
+                // Unhandled event kind: nothing to project incrementally.
+                return;
+        }
+    }
+    /**
+     * Apply `project` to every workspace backed by this installation that actually
+     * links the affected repo. Since repos are linked explicitly per workspace, an
+     * event for a repo only updates the boards that chose to track it.
+     */
+    async forEachLinkedWorkspace(installationId, repoGithubId, project) {
+        const workspaceIds = await this.deps.githubInstallationRepository.listWorkspacesForInstallation(installationId);
+        for (const ws of workspaceIds) {
+            const repo = await this.deps.repoProjectionRepository.get(ws, repoGithubId);
+            if (repo)
+                await project(ws);
+        }
+    }
+    async handleInstallation(eventName, root) {
+        const installationId = this.installationIdOf(root);
+        if (installationId === null)
+            return;
+        const installation = await this.deps.githubInstallationRepository.getByInstallationId(installationId);
+        if (!installation)
+            return;
+        const now = this.deps.clock.now();
+        const action = typeof root.action === 'string' ? root.action : '';
+        // Lifecycle: suspend/uninstall tombstones the binding (account-wide, since the
+        // installation is shared); unsuspend revives it. Repos are NOT auto-projected
+        // here — they are linked explicitly per workspace.
+        if (eventName === 'installation') {
+            if (action === 'deleted' || action === 'suspend') {
+                await this.deps.githubInstallationRepository.softDelete(installationId, now);
+            }
+            else if (action === 'unsuspend') {
+                await this.deps.githubInstallationRepository.upsert({ ...installation, deletedAt: null });
+            }
+            return;
+        }
+        // installation_repositories: a removed repo is no longer accessible, so
+        // tombstone it in every workspace that linked it. Added repos just become
+        // available — the user links them explicitly, so we don't project them here.
+        const removed = Array.isArray(root.repositories_removed)
+            ? root.repositories_removed
+            : [];
+        if (removed.length === 0)
+            return;
+        const workspaceIds = await this.deps.githubInstallationRepository.listWorkspacesForInstallation(installationId);
+        for (const ws of workspaceIds) {
+            const tracked = await this.deps.repoProjectionRepository.list(ws);
+            const removedIds = new Set(removed.map((r) => r.id));
+            const remaining = tracked
+                .filter((repo) => repo.installationId === installationId && !removedIds.has(repo.githubId))
+                .map((repo) => repo.githubId);
+            // Only rewrite when this workspace actually tracks one of the removed repos.
+            if (remaining.length !== tracked.filter((r) => r.installationId === installationId).length) {
+                await this.deps.repoProjectionRepository.tombstoneMissing(ws, installationId, remaining, now);
+            }
+        }
+    }
+    installationIdOf(root) {
+        const inst = asObject(root.installation);
+        const id = inst?.id;
+        return typeof id === 'number' ? id : null;
+    }
+    repoIdOf(root) {
+        const repo = asObject(root.repository);
+        const id = repo?.id;
+        return typeof id === 'number' ? id : null;
+    }
+}
+//# sourceMappingURL=WebhookService.js.map