@catalyst-cloud/cli 0.14.6 → 0.14.8

package/dist/onboard-projects.js

@@ -0,0 +1,350 @@
+import { verifyOnboardRoutes } from "./onboard-capabilities.js";
+import { loadConfig, normalizeBaseUrl } from "./config.js";
+import { readExistingOnboardJson, selectedOnboardTeam, } from "./onboard-existing.js";
+import { existingRepositoryAdapter, } from "./onboard-repositories.js";
+const object = (value) => value !== null && typeof value === "object" && !Array.isArray(value)
+    ? value
+    : null;
+const part = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,99}$/;
+const key = (row) => `${row.owner}/${row.name}`.toLowerCase();
+const waiting = (reason) => ({
+    state: "waiting",
+    reason,
+});
+function repository(value) {
+    const row = object(value);
+    return row &&
+        typeof row.owner === "string" &&
+        part.test(row.owner) &&
+        typeof row.name === "string" &&
+        part.test(row.name)
+        ? { owner: row.owner, name: row.name }
+        : null;
+}
+function pendingSelection(journal) {
+    const step = journal.steps.find((row) => row.id === "github.repos" && row.state === "done");
+    const raw = step?.evidence?.repository;
+    if (typeof raw !== "string" || raw.length > 64_000)
+        return null;
+    try {
+        const values = JSON.parse(raw);
+        if (!Array.isArray(values) ||
+            values.length !== 1 ||
+            object(values[0])?.teamId !== selectedOnboardTeam(journal))
+            return null;
+        return repository(values[0]);
+    }
+    catch {
+        return null;
+    }
+}
+async function options(ctx, journal, signal) {
+    const cfg = loadConfig(ctx.home);
+    if (!cfg?.user ||
+        !["owner", "admin"].includes(cfg.user.role) ||
+        cfg.account !== journal.account ||
+        cfg.user.id !== journal.membershipId ||
+        !journal.baseUrl ||
+        normalizeBaseUrl(cfg.baseUrl) !== normalizeBaseUrl(journal.baseUrl))
+        return { reason: "project_identity_unverified" };
+    const personId = cfg.user.id;
+    const teamId = selectedOnboardTeam(journal);
+    if (!teamId)
+        return { reason: "team_selection_unverified" };
+    const support = await verifyOnboardRoutes(ctx, journal, [{ method: "GET", path: "/api/v1/me/repositories/options" }], signal);
+    if ("reason" in support)
+        return support;
+    const sameIdentity = () => {
+        const current = loadConfig(ctx.home);
+        return (current?.user &&
+            ["owner", "admin"].includes(current.user.role) &&
+            current.account === cfg.account &&
+            current.user.id === personId &&
+            normalizeBaseUrl(current.baseUrl) === normalizeBaseUrl(cfg.baseUrl));
+    };
+    // The read helper loads its own credential. Reject a switch before that read and again
+    // after its body settles, before any provider names become receipt evidence.
+    if (!sameIdentity())
+        return { reason: "project_identity_unverified" };
+    const read = await readExistingOnboardJson(ctx, "/api/v1/me/repositories/options", signal);
+    if (!sameIdentity())
+        return { reason: "project_identity_unverified" };
+    if ("reason" in read)
+        return { reason: "project_options_unavailable" };
+    const body = object(read.body), linear = object(body?.linear), github = object(body?.github);
+    if (!linear ||
+        !github ||
+        linear.connected !== true ||
+        github.connected !== true ||
+        linear.error !== null ||
+        github.error !== null)
+        return { reason: "project_provider_inventory_unavailable" };
+    if (!Array.isArray(linear.teams) ||
+        linear.teams.length > 1_000 ||
+        !Array.isArray(github.repositories) ||
+        github.repositories.length > 10_000 ||
+        typeof github.truncated !== "boolean" ||
+        !Array.isArray(body?.taken) ||
+        body.taken.length > 10_000)
+        return { reason: "project_options_unverified" };
+    const teams = linear.teams.filter((value) => object(value)?.id === teamId);
+    const team = object(teams[0]);
+    if (teams.length !== 1 ||
+        typeof team?.key !== "string" ||
+        !/^[A-Za-z0-9_-]{1,64}$/.test(team.key))
+        return { reason: "team_selection_unverified" };
+    const rows = [], seen = new Set();
+    for (const value of github.repositories) {
+        const row = repository(value);
+        if (!row || seen.has(key(row)))
+            return { reason: "project_options_unverified" };
+        seen.add(key(row));
+        rows.push(row);
+    }
+    const taken = [];
+    for (const value of body.taken) {
+        const row = object(value);
+        const repo = repository({
+            owner: row?.githubRepoOwner,
+            name: row?.githubRepoName,
+        });
+        if (!row ||
+            !repo ||
+            typeof row.linearTeamId !== "string" ||
+            typeof row.status !== "string" ||
+            !["active", "archived"].includes(row.status))
+            return { reason: "project_options_unverified" };
+        taken.push({
+            teamId: row.linearTeamId,
+            repo,
+            active: row.status === "active",
+        });
+    }
+    return { rows, taken, teamKey: team.key, truncated: github.truncated };
+}
+/** Q3 records a choice. It does not report an unregistered repository as a cloud binding. */
+export function firstProjectAdapters(args, input = {}) {
+    const existing = existingRepositoryAdapter(args, input.chooseExisting);
+    let chosen = null;
+    const selected = (journal) => {
+        const explicit = args.flags.repo;
+        if (explicit !== undefined) {
+            const values = Array.isArray(explicit) ? explicit : [explicit];
+            if (values.length !== 1 || typeof values[0] !== "string")
+                return null;
+            const parts = values[0].split("/");
+            return parts.length === 2
+                ? repository({ owner: parts[0], name: parts[1] })
+                : null;
+        }
+        return chosen ?? pendingSelection(journal);
+    };
+    const selectionResult = (row, journal) => ({
+        state: "done",
+        evidence: {
+            repository: JSON.stringify([
+                { ...row, teamId: selectedOnboardTeam(journal) },
+            ]),
+            count: 1,
+        },
+    });
+    const binding = async (ctx, journal, signal) => {
+        const row = selected(journal);
+        if (!row)
+            return waiting("repository_selection_unverified");
+        return existingRepositoryAdapter({
+            ...args,
+            flags: { ...args.flags, repo: `${row.owner}/${row.name}` },
+        }).check(ctx, journal, signal);
+    };
+    const projectCheck = async (ctx, journal, signal) => {
+        const known = await existing.check(ctx, journal, signal);
+        if (known.state === "done")
+            return known;
+        const live = await binding(ctx, journal, signal);
+        if (live.state === "done")
+            return live;
+        if (live.reason !== "repository_inventory_empty")
+            return live;
+        const row = selected(journal);
+        if (!row)
+            return waiting("repository_selection_unverified");
+        const list = await options(ctx, journal, signal);
+        if ("reason" in list)
+            return waiting(list.reason);
+        const held = list.taken.filter((value) => value.teamId === selectedOnboardTeam(journal) ||
+            key(value.repo) === key(row));
+        if (held.length)
+            return waiting(held.length === 1 &&
+                held[0].active &&
+                held[0].teamId === selectedOnboardTeam(journal) &&
+                key(held[0].repo) === key(row)
+                ? "project_registration_visibility_pending"
+                : "project_binding_conflict");
+        return list.rows.some((value) => key(value) === key(row))
+            ? { state: "pending" }
+            : waiting("repository_selection_unverified");
+    };
+    return {
+        "github.repos": {
+            check: async (ctx, journal, signal) => {
+                const live = await existing.check(ctx, journal, signal);
+                if (live.state === "done")
+                    return live;
+                // A names-only Q3 receipt remains the selected choice when registration later becomes
+                // visible. Resolve its actual ID without asking the registered-repository picker again.
+                if (selected(journal)) {
+                    const registered = await binding(ctx, journal, signal);
+                    if (registered.state === "done" ||
+                        registered.reason !== "repository_inventory_empty")
+                        return registered;
+                }
+                if (live.reason !== "repository_inventory_empty")
+                    return live;
+                const list = await options(ctx, journal, signal);
+                if ("reason" in list)
+                    return waiting(list.reason);
+                const row = selected(journal);
+                if (row)
+                    return list.rows.some((value) => key(value) === key(row))
+                        ? selectionResult(row, journal)
+                        : waiting("repository_selection_unverified");
+                return input.chooseFirst && list.rows.length
+                    ? { state: "pending" }
+                    : waiting("repository_choice_required");
+            },
+            act: async (ctx, journal, signal) => {
+                const live = await existing.check(ctx, journal, signal);
+                if (live.reason !== "repository_inventory_empty")
+                    return existing.act ? existing.act(ctx, journal, signal) : live;
+                const list = await options(ctx, journal, signal);
+                if ("reason" in list)
+                    return waiting(list.reason);
+                if (!input.chooseFirst || !list.rows.length)
+                    return waiting("repository_choice_required");
+                if (list.truncated)
+                    input.message?.("GitHub returned part of its repository list. Choose a displayed repository, or stop and adjust the App access before resuming.");
+                let remove = () => { };
+                const answer = await new Promise((resolve, reject) => {
+                    const stopped = () => resolve(null);
+                    if (signal?.aborted) {
+                        stopped();
+                        return;
+                    }
+                    signal?.addEventListener("abort", stopped, { once: true });
+                    remove = () => signal?.removeEventListener("abort", stopped);
+                    Promise.resolve()
+                        .then(() => signal?.aborted
+                        ? null
+                        : input.chooseFirst(list.rows.map((row) => ({ ...row }))))
+                        .then(resolve, reject);
+                }).finally(() => remove());
+                if (signal?.aborted || answer === null)
+                    return waiting("interrupted");
+                chosen =
+                    list.rows.find((row) => key(row) === answer.toLowerCase()) ?? null;
+                if (!chosen)
+                    return waiting("repository_selection_unverified");
+                const fresh = await options(ctx, journal, signal);
+                return "reason" in fresh
+                    ? waiting(fresh.reason)
+                    : fresh.rows.some((row) => key(row) === key(chosen))
+                        ? selectionResult(chosen, journal)
+                        : waiting("repository_selection_unverified");
+            },
+        },
+        projects: {
+            check: projectCheck,
+            act: async (ctx, journal, signal) => {
+                const before = await projectCheck(ctx, journal, signal);
+                if (before.state !== "pending")
+                    return before;
+                const row = selected(journal);
+                if (!row)
+                    return waiting("repository_selection_unverified");
+                const list = await options(ctx, journal, signal);
+                if ("reason" in list)
+                    return waiting(list.reason);
+                // Recheck after the second provider read before any mutation; an archived holder is a conflict.
+                if (!list.rows.some((value) => key(value) === key(row)) ||
+                    list.taken.some((value) => value.teamId === selectedOnboardTeam(journal) ||
+                        key(value.repo) === key(row)))
+                    return projectCheck(ctx, journal, signal);
+                const result = await createFirstProject(ctx, journal, row, list.teamKey, signal);
+                if (result)
+                    return waiting(result);
+                return projectCheck(ctx, journal, signal);
+            },
+        },
+    };
+}
+async function createFirstProject(ctx, journal, row, teamKey, external) {
+    const support = await verifyOnboardRoutes(ctx, journal, [{ method: "POST", path: "/api/v1/me/repositories" }], external);
+    if ("reason" in support)
+        return support.reason;
+    const cfg = loadConfig(ctx.home);
+    if (!cfg?.user ||
+        !["admin", "owner"].includes(cfg.user.role) ||
+        cfg.account !== journal.account ||
+        cfg.user.id !== journal.membershipId ||
+        !journal.baseUrl ||
+        normalizeBaseUrl(cfg.baseUrl) !== normalizeBaseUrl(journal.baseUrl))
+        return "project_identity_unverified";
+    const expiry = cfg.auth
+        ? Date.parse(cfg.auth.expiresAt) - ctx.now().getTime()
+        : 0;
+    const bearer = cfg.key ||
+        (cfg.auth && Number.isFinite(expiry) && expiry > 30_000
+            ? cfg.auth.accessToken
+            : undefined);
+    if (!bearer)
+        return "project_login_refresh_required";
+    const owned = new AbortController(), signal = external
+        ? AbortSignal.any([external, owned.signal])
+        : owned.signal;
+    const timer = setTimeout(() => owned.abort(), 30_000);
+    let remove = () => { };
+    try {
+        return await new Promise((resolve) => {
+            const stopped = () => resolve(external?.aborted ? "interrupted" : "project_create_unverified");
+            if (signal.aborted) {
+                stopped();
+                return;
+            }
+            signal.addEventListener("abort", stopped, { once: true });
+            remove = () => signal.removeEventListener("abort", stopped);
+            Promise.resolve()
+                .then(async () => {
+                if (signal.aborted)
+                    return "interrupted";
+                const response = await ctx.fetch(`${normalizeBaseUrl(cfg.baseUrl)}/api/v1/me/repositories`, {
+                    method: "POST",
+                    redirect: "error",
+                    signal,
+                    headers: {
+                        authorization: `Bearer ${bearer}`,
+                        "content-type": "application/json",
+                        accept: "application/json",
+                    },
+                    body: JSON.stringify({
+                        name: `${row.owner}/${row.name}`.slice(0, 80),
+                        linearTeamId: selectedOnboardTeam(journal),
+                        linearTeamKey: teamKey,
+                        githubRepoOwner: row.owner,
+                        githubRepoName: row.name,
+                    }),
+                });
+                // A response is not readiness evidence. The next check reads the binding and contract again.
+                return response.status === 201 || response.status === 409
+                    ? null
+                    : "project_create_unverified";
+            })
+                .then((result) => (signal.aborted ? stopped() : resolve(result)), () => signal.aborted ? stopped() : resolve("project_create_unverified"));
+        });
+    }
+    finally {
+        clearTimeout(timer);
+        remove();
+        owned.abort();
+    }
+}

package/dist/onboard-repositories.js

@@ -1,44 +1,105 @@
-import { loadConfig, normalizeBaseUrl, readManifest } from "./config.js";
+import { isRepositoryId } from "./repository-id.js";
+import { loadConfig, normalizeBaseUrl, readManifest, } from "./config.js";
 import { contractVersionInRange } from "./contract.js";
-import { readExistingOnboardJson, selectedOnboardTeam } from "./onboard-existing.js";
+import { readExistingOnboardJson, selectedOnboardTeam, } from "./onboard-existing.js";
 const part = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,99}$/;
 const id = /^[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
-const object = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+const object = (value) => value !== null && typeof value === "object" && !Array.isArray(value)
+    ? value
+    : null;
 const key = (row) => `${row.owner}/${row.name}`.toLowerCase();
-const waiting = (reason) => ({ state: "waiting", reason });
+const waiting = (reason) => ({
+    state: "waiting",
+    reason,
+});
 const valid = (value) => {
     const row = object(value);
-    return !!row && typeof row.teamId === "string" && id.test(row.teamId) && typeof row.repoId === "string" && id.test(row.repoId) &&
-        typeof row.owner === "string" && part.test(row.owner) && typeof row.name === "string" && part.test(row.name);
+    return (!!row &&
+        typeof row.teamId === "string" &&
+        id.test(row.teamId) &&
+        isRepositoryId(row.repoId) &&
+        typeof row.owner === "string" &&
+        part.test(row.owner) &&
+        typeof row.name === "string" &&
+        part.test(row.name));
 };
 /** Names/IDs only. A saved selection never proves current access or repository readiness. */
 export function selectedOnboardRepositories(journal) {
-    const step = journal?.steps.find(row => row.id === "github.repos" && row.state === "done");
-    const receipt = step?.evidence?.repository;
+    const selection = journal?.steps.find((row) => row.id === "github.repos" && row.state === "done");
+    const registered = journal?.steps.find((row) => row.id === "projects" && row.state === "done");
+    const receipt = selection?.evidence?.repository;
     if (typeof receipt !== "string" || receipt.length > 64_000)
         return [];
     try {
         const rows = JSON.parse(receipt);
-        if (!Array.isArray(rows) || !rows.length || rows.length > 100 || !rows.every(valid))
+        if (!Array.isArray(rows) || !rows.length || rows.length > 100)
             return [];
-        if (new Set(rows.map(key)).size !== rows.length)
+        if (rows.every(valid)) {
+            if (new Set(rows.map(key)).size !== rows.length)
+                return [];
+            return rows.map((row) => ({
+                teamId: row.teamId,
+                owner: row.owner,
+                name: row.name,
+                repoId: row.repoId,
+            }));
+        }
+        // A fresh Q3 choice has names only. It may use later verified registration evidence only
+        // when the exact selected team/repository matches, never an earlier project's selection.
+        if (rows.length !== 1)
+            return [];
+        const selected = object(rows[0]);
+        if (!selected ||
+            selected.repoId !== undefined ||
+            typeof selected.teamId !== "string" ||
+            !id.test(selected.teamId) ||
+            typeof selected.owner !== "string" ||
+            !part.test(selected.owner) ||
+            typeof selected.name !== "string" ||
+            !part.test(selected.name))
+            return [];
+        const evidence = registered?.evidence?.repository;
+        if (typeof evidence !== "string" || evidence.length > 64_000)
             return [];
-        return rows.map(row => ({ teamId: row.teamId, owner: row.owner, name: row.name, repoId: row.repoId }));
+        const registeredRows = JSON.parse(evidence);
+        if (!Array.isArray(registeredRows) ||
+            registeredRows.length !== 1 ||
+            !registeredRows.every(valid))
+            return [];
+        const live = registeredRows[0];
+        return live.teamId === selected.teamId &&
+            key(live) === key({ owner: selected.owner, name: selected.name })
+            ? [{ ...live }]
+            : [];
     }
     catch {
         return [];
     }
 }
 /** The personal ACL inventory chooses bindings; a fresh contract supplies IDs only. No cache read. */
-async function inventory(ctx, journal, signal) {
+export async function readOnboardRepositoryInventory(ctx, journal, signal) {
     const cfg = loadConfig(ctx.home);
-    if (!cfg?.user || !journal.account || cfg.account !== journal.account || journal.membershipId !== cfg.user.id ||
-        !journal.baseUrl || normalizeBaseUrl(journal.baseUrl) !== normalizeBaseUrl(cfg.baseUrl))
+    if (!cfg?.user ||
+        !journal.account ||
+        cfg.account !== journal.account ||
+        journal.membershipId !== cfg.user.id ||
+        !journal.baseUrl ||
+        normalizeBaseUrl(journal.baseUrl) !== normalizeBaseUrl(cfg.baseUrl))
         return { reason: "repository_identity_unverified" };
+    const personId = cfg.user.id;
+    const sameIdentity = () => {
+        const current = loadConfig(ctx.home);
+        return (current?.user &&
+            current.account === cfg.account &&
+            current.user.id === personId &&
+            normalizeBaseUrl(current.baseUrl) === normalizeBaseUrl(cfg.baseUrl));
+    };
     const teamId = selectedOnboardTeam(journal);
     if (!teamId)
         return { reason: "team_selection_unverified" };
     const read = await readExistingOnboardJson(ctx, "/api/v1/repos", signal);
+    if (!sameIdentity())
+        return { reason: "repository_identity_unverified" };
     if ("reason" in read)
         return { reason: "repository_read_unavailable" };
     const body = object(read.body);
@@ -48,8 +109,13 @@ async function inventory(ctx, journal, signal) {
     const seen = new Set();
     for (const value of body.repos) {
         const row = object(value);
-        if (!row || typeof row.teamId !== "string" || !id.test(row.teamId) || typeof row.owner !== "string" || !part.test(row.owner) ||
-            typeof row.name !== "string" || !part.test(row.name))
+        if (!row ||
+            typeof row.teamId !== "string" ||
+            !id.test(row.teamId) ||
+            typeof row.owner !== "string" ||
+            !part.test(row.owner) ||
+            typeof row.name !== "string" ||
+            !part.test(row.name))
             return { reason: "repository_inventory_shape" };
         if (row.teamId !== teamId)
             continue;
@@ -59,24 +125,36 @@ async function inventory(ctx, journal, signal) {
         seen.add(name);
         bindings.push({ owner: row.owner, name: row.name });
     }
+    if (!sameIdentity())
+        return { reason: "repository_identity_unverified" };
     if (!bindings.length)
         return { repositories: [] };
     const contractRead = await readExistingOnboardJson(ctx, "/api/v1/agent/contract", signal);
+    if (!sameIdentity())
+        return { reason: "repository_identity_unverified" };
     if ("reason" in contractRead)
         return { reason: "repository_contract_unavailable" };
     const doc = object(contractRead.body);
     const account = object(doc?.account);
     const merge = object(doc?.merge);
-    if (!doc || account?.id !== journal.account || typeof doc.contractVersion !== "string" ||
+    if (!doc ||
+        account?.id !== journal.account ||
+        typeof doc.contractVersion !== "string" ||
         contractVersionInRange(doc.contractVersion, readManifest().tenantContractRange) !== true ||
-        !merge || !Array.isArray(merge.repositories) || merge.repositories.length > 10_000)
+        !merge ||
+        !Array.isArray(merge.repositories) ||
+        merge.repositories.length > 10_000)
         return { reason: "repository_contract_unverified" };
     const lookup = new Map();
     const idNames = new Map();
     for (const value of merge.repositories) {
         const row = object(value);
-        if (!row || typeof row.owner !== "string" || !part.test(row.owner) || typeof row.name !== "string" || !part.test(row.name) ||
-            typeof row.repoId !== "string" || !id.test(row.repoId))
+        if (!row ||
+            typeof row.owner !== "string" ||
+            !part.test(row.owner) ||
+            typeof row.name !== "string" ||
+            !part.test(row.name) ||
+            !isRepositoryId(row.repoId))
             return { reason: "repository_contract_unverified" };
         const name = key({ owner: row.owner, name: row.name });
         if (idNames.has(row.repoId) && idNames.get(row.repoId) !== name)
@@ -99,34 +177,57 @@ export function existingRepositoryAdapter(args, choose) {
         const explicit = args.flags.repo;
         if (explicit !== undefined) {
             const names = Array.isArray(explicit) ? explicit : [explicit];
-            if (!names.length || names.length > 100 || !names.every(name => typeof name === "string" && /^[A-Za-z0-9][A-Za-z0-9_.-]{0,99}\/[A-Za-z0-9][A-Za-z0-9_.-]{0,99}$/.test(name)))
+            if (!names.length ||
+                names.length > 100 ||
+                !names.every((name) => typeof name === "string" &&
+                    /^[A-Za-z0-9][A-Za-z0-9_.-]{0,99}\/[A-Za-z0-9][A-Za-z0-9_.-]{0,99}$/.test(name)))
                 return null;
-            const wanted = names.map(name => String(name).toLowerCase());
+            const wanted = names.map((name) => String(name).toLowerCase());
             if (new Set(wanted).size !== wanted.length)
                 return null;
-            const selected = wanted.map(name => repositories.find(row => key(row) === name));
-            return selected.every((row) => !!row) ? selected : null;
+            const selected = wanted.map((name) => repositories.find((row) => key(row) === name));
+            return selected.every((row) => !!row)
+                ? selected
+                : null;
         }
         const saved = chosen ?? selectedOnboardRepositories(journal);
         if (!saved.length)
             return null;
-        const selected = saved.map(row => repositories.find(live => key(live) === key(row) && live.teamId === row.teamId && live.repoId === row.repoId));
-        return selected.every((row) => !!row) ? selected : null;
+        const selected = saved.map((row) => repositories.find((live) => key(live) === key(row) &&
+            live.teamId === row.teamId &&
+            live.repoId === row.repoId));
+        return selected.every((row) => !!row)
+            ? selected
+            : null;
     };
     const check = async (ctx, journal, signal) => {
-        const list = await inventory(ctx, journal, signal);
+        const list = await readOnboardRepositoryInventory(ctx, journal, signal);
         if ("reason" in list)
             return waiting(list.reason);
         if (!list.repositories.length)
             return waiting("repository_inventory_empty");
         const rows = requested(list.repositories, journal);
         if (!rows)
-            return args.flags.repo !== undefined || chosen || selectedOnboardRepositories(journal).length
-                ? waiting("repository_selection_unverified") : choose ? { state: "pending" } : waiting("repository_choice_required");
-        return { state: "done", evidence: { repository: JSON.stringify(rows), count: rows.length, checkedAt: ctx.now().getTime() } };
+            return args.flags.repo !== undefined ||
+                chosen ||
+                selectedOnboardRepositories(journal).length
+                ? waiting("repository_selection_unverified")
+                : choose
+                    ? { state: "pending" }
+                    : waiting("repository_choice_required");
+        return {
+            state: "done",
+            evidence: {
+                repository: JSON.stringify(rows),
+                count: rows.length,
+                checkedAt: ctx.now().getTime(),
+            },
+        };
     };
-    return { check, act: async (ctx, journal, signal) => {
-            const list = await inventory(ctx, journal, signal);
+    return {
+        check,
+        act: async (ctx, journal, signal) => {
+            const list = await readOnboardRepositoryInventory(ctx, journal, signal);
             if ("reason" in list)
                 return waiting(list.reason);
             if (!list.repositories.length)
@@ -142,19 +243,27 @@ export function existingRepositoryAdapter(args, choose) {
                 }
                 signal?.addEventListener("abort", stopped, { once: true });
                 remove = () => signal?.removeEventListener("abort", stopped);
-                Promise.resolve().then(() => signal?.aborted ? null : choose(list.repositories.map(row => ({ ...row })))).then(resolve, reject);
+                Promise.resolve()
+                    .then(() => signal?.aborted
+                    ? null
+                    : choose(list.repositories.map((row) => ({ ...row }))))
+                    .then(resolve, reject);
             }).finally(() => remove());
             if (!answer || signal?.aborted)
                 return waiting("interrupted");
-            if (!Array.isArray(answer) || !answer.length || answer.length > 100 || !answer.every(name => typeof name === "string"))
+            if (!Array.isArray(answer) ||
+                !answer.length ||
+                answer.length > 100 ||
+                !answer.every((name) => typeof name === "string"))
                 return waiting("repository_selection_unverified");
-            const names = answer.map(name => name.toLowerCase());
+            const names = answer.map((name) => name.toLowerCase());
             if (new Set(names).size !== names.length)
                 return waiting("repository_selection_unverified");
-            const rows = names.map(name => list.repositories.find(row => key(row) === name));
+            const rows = names.map((name) => list.repositories.find((row) => key(row) === name));
             if (!rows.every((row) => !!row))
                 return waiting("repository_selection_unverified");
             chosen = rows;
             return check(ctx, journal, signal);
-        } };
+        },
+    };
 }