@cursor/bdk 0.2.8 → 0.2.10

package/dist/channels/github/auth.js

@@ -11,201 +11,187 @@
  * Production should set App credentials and omit ambient PATs. Local testing
  * can keep using a PAT or `gh auth login` when App creds are unset.
  */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { createAppAuth } from "@octokit/auth-app";
+import { isSecretRef } from "../../types.js";
 const execFileAsync = promisify(execFile);
 let ghAuthTokenCache = null;
-const GH_AUTH_CACHE_MS = 5 * 60000;
+const GH_AUTH_CACHE_MS = 5 * 60_000;
 /** Refresh exported `GH_TOKEN` before installation tokens expire (~60m). */
-const GH_CLI_TOKEN_REFRESH_MS = 50 * 60000;
+const GH_CLI_TOKEN_REFRESH_MS = 50 * 60_000;
 let ghCliTokenRefreshTimer = null;
-/** Resolve a credential value (literal or lazy). */
-export function resolveCredentialValue(value) {
-    return __awaiter(this, void 0, void 0, function* () {
-        if (value === undefined) {
-            return undefined;
-        }
-        const resolved = typeof value === "function" ? yield value() : value;
-        if (typeof resolved !== "string") {
-            return undefined;
-        }
-        const trimmed = resolved.trim();
-        return trimmed === "" ? undefined : trimmed;
-    });
+/**
+ * Resolve a credential value: a literal, a lazy getter, or a named secret
+ * read from `process.env` (locally the shell; hosted, the bound deployment
+ * secrets the runtime loads into the environment per request).
+ */
+export async function resolveCredentialValue(value) {
+    if (value === undefined) {
+        return undefined;
+    }
+    const resolved = typeof value === "function"
+        ? await value()
+        : isSecretRef(value)
+            ? process.env[value.secretName]
+            : value;
+    if (typeof resolved !== "string") {
+        return undefined;
+    }
+    const trimmed = resolved.trim();
+    return trimmed === "" ? undefined : trimmed;
 }
 /** True when App id + private key are configured (credentials or env). */
-export function hasGitHubAppCredentials(credentials) {
-    return __awaiter(this, void 0, void 0, function* () {
-        try {
-            yield resolveGitHubAppId(credentials === null || credentials === void 0 ? void 0 : credentials.appId);
-            yield resolveGitHubPrivateKey(credentials === null || credentials === void 0 ? void 0 : credentials.privateKey);
-            return true;
-        }
-        catch (_a) {
-            return false;
-        }
-    });
+export async function hasGitHubAppCredentials(credentials) {
+    try {
+        await resolveGitHubAppId(credentials?.appId);
+        await resolveGitHubPrivateKey(credentials?.privateKey);
+        return true;
+    }
+    catch {
+        return false;
+    }
 }
 /**
  * Resolve an installation id from the call site, then
  * `GITHUB_APP_INSTALLATION_ID` (host / non-webhook GitHub calls).
  */
-export function resolveGitHubInstallationId(installationId) {
-    return __awaiter(this, void 0, void 0, function* () {
-        if (installationId !== undefined && Number.isInteger(installationId) && installationId > 0) {
-            return installationId;
-        }
-        const fromEnv = yield resolveCredentialValue(process.env.GITHUB_APP_INSTALLATION_ID);
-        if (fromEnv === undefined) {
-            return undefined;
-        }
-        if (!/^[1-9][0-9]*$/u.test(fromEnv)) {
-            return undefined;
-        }
-        return Number(fromEnv);
-    });
+export async function resolveGitHubInstallationId(installationId) {
+    if (installationId !== undefined && Number.isInteger(installationId) && installationId > 0) {
+        return installationId;
+    }
+    const fromEnv = await resolveCredentialValue(process.env.GITHUB_APP_INSTALLATION_ID);
+    if (fromEnv === undefined) {
+        return undefined;
+    }
+    if (!/^[1-9][0-9]*$/u.test(fromEnv)) {
+        return undefined;
+    }
+    return Number(fromEnv);
 }
 /**
  * Resolve a bearer token for GitHub REST calls. Prefer explicit credentials,
  * then App installation tokens when configured, then local PAT / `gh auth`.
  */
-export function resolveGitHubAccessToken(input) {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a, _b, _c, _d;
-        var _e, _f;
-        const explicit = (_e = (yield resolveCredentialValue((_a = input.credentials) === null || _a === void 0 ? void 0 : _a.token))) !== null && _e !== void 0 ? _e : (yield resolveCredentialValue((_b = input.credentials) === null || _b === void 0 ? void 0 : _b.installationToken));
-        if (explicit !== undefined) {
-            return explicit;
-        }
-        const installationId = yield resolveGitHubInstallationId(input.installationId);
-        if (installationId !== undefined && (yield hasGitHubAppCredentials(input.credentials))) {
-            return createGitHubInstallationToken({
-                api: input.api,
-                appId: (_c = input.credentials) === null || _c === void 0 ? void 0 : _c.appId,
-                installationId,
-                privateKey: (_d = input.credentials) === null || _d === void 0 ? void 0 : _d.privateKey,
-            });
-        }
-        const fromEnv = (_f = (yield resolveCredentialValue(process.env.GITHUB_TOKEN))) !== null && _f !== void 0 ? _f : (yield resolveCredentialValue(process.env.GH_TOKEN));
-        if (fromEnv !== undefined) {
-            return fromEnv;
-        }
-        const fromGh = yield tryResolveGhAuthToken();
-        if (fromGh !== undefined) {
-            return fromGh;
-        }
-        throw new Error("githubChannel: no GitHub token available (set GITHUB_APP_ID + GITHUB_APP_PRIVATE_KEY + installation id, or GITHUB_TOKEN / GH_TOKEN, or run `gh auth login`).");
-    });
+export async function resolveGitHubAccessToken(input) {
+    const explicit = (await resolveCredentialValue(input.credentials?.token)) ??
+        (await resolveCredentialValue(input.credentials?.installationToken));
+    if (explicit !== undefined) {
+        return explicit;
+    }
+    const installationId = await resolveGitHubInstallationId(input.installationId);
+    if (installationId !== undefined && (await hasGitHubAppCredentials(input.credentials))) {
+        return createGitHubInstallationToken({
+            api: input.api,
+            appId: input.credentials?.appId,
+            installationId,
+            privateKey: input.credentials?.privateKey,
+        });
+    }
+    const fromEnv = (await resolveCredentialValue(process.env.GITHUB_TOKEN)) ??
+        (await resolveCredentialValue(process.env.GH_TOKEN));
+    if (fromEnv !== undefined) {
+        return fromEnv;
+    }
+    const fromGh = await tryResolveGhAuthToken();
+    if (fromGh !== undefined) {
+        return fromGh;
+    }
+    throw new Error("githubChannel: no GitHub token available (set GITHUB_APP_ID + GITHUB_APP_PRIVATE_KEY + installation id, or GITHUB_TOKEN / GH_TOKEN, or run `gh auth login`).");
 }
 /** Soft resolve — returns undefined instead of throwing. */
-export function tryResolveGitHubAccessToken(input) {
-    return __awaiter(this, void 0, void 0, function* () {
-        try {
-            return yield resolveGitHubAccessToken(input);
-        }
-        catch (_a) {
-            return undefined;
-        }
-    });
+export async function tryResolveGitHubAccessToken(input) {
+    try {
+        return await resolveGitHubAccessToken(input);
+    }
+    catch {
+        return undefined;
+    }
 }
 /** Read `gh auth token` when the CLI is logged in. Cached briefly. */
-export function tryResolveGhAuthToken() {
-    return __awaiter(this, void 0, void 0, function* () {
-        if (ghAuthTokenCache !== null && Date.now() < ghAuthTokenCache.expiresAtMs) {
-            return ghAuthTokenCache.token;
-        }
-        try {
-            const { stdout } = yield execFileAsync("gh", ["auth", "token"], {
-                timeout: 5000,
-                env: process.env,
-            });
-            const token = stdout.trim();
-            if (token === "") {
-                return undefined;
-            }
-            ghAuthTokenCache = {
-                token,
-                expiresAtMs: Date.now() + GH_AUTH_CACHE_MS,
-            };
-            return token;
-        }
-        catch (_a) {
+export async function tryResolveGhAuthToken() {
+    if (ghAuthTokenCache !== null && Date.now() < ghAuthTokenCache.expiresAtMs) {
+        return ghAuthTokenCache.token;
+    }
+    try {
+        const { stdout } = await execFileAsync("gh", ["auth", "token"], {
+            timeout: 5_000,
+            env: process.env,
+        });
+        const token = stdout.trim();
+        if (token === "") {
             return undefined;
         }
-    });
+        ghAuthTokenCache = {
+            token,
+            expiresAtMs: Date.now() + GH_AUTH_CACHE_MS,
+        };
+        return token;
+    }
+    catch {
+        return undefined;
+    }
 }
-export function resolveGitHubAppId(appId) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const source = appId !== null && appId !== void 0 ? appId : (process.env.GITHUB_APP_ID !== undefined && process.env.GITHUB_APP_ID !== ""
+export async function resolveGitHubAppId(appId) {
+    const source = appId ??
+        (process.env.GITHUB_APP_ID !== undefined && process.env.GITHUB_APP_ID !== ""
             ? process.env.GITHUB_APP_ID
             : undefined);
-        if (source === undefined) {
-            throw new Error("githubChannel: GITHUB_APP_ID is required.");
-        }
-        if (typeof source === "number") {
-            return String(source);
-        }
-        const value = yield resolveCredentialValue(source);
-        if (value === undefined) {
-            throw new Error("githubChannel: GITHUB_APP_ID is required.");
-        }
-        return value;
-    });
+    if (source === undefined) {
+        throw new Error("githubChannel: GITHUB_APP_ID is required.");
+    }
+    if (typeof source === "number") {
+        return String(source);
+    }
+    const value = await resolveCredentialValue(source);
+    if (value === undefined) {
+        throw new Error("githubChannel: GITHUB_APP_ID is required.");
+    }
+    return value;
 }
-export function resolveGitHubPrivateKey(privateKey) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const source = privateKey !== null && privateKey !== void 0 ? privateKey : (process.env.GITHUB_APP_PRIVATE_KEY !== undefined && process.env.GITHUB_APP_PRIVATE_KEY !== ""
+export async function resolveGitHubPrivateKey(privateKey) {
+    const source = privateKey ??
+        (process.env.GITHUB_APP_PRIVATE_KEY !== undefined && process.env.GITHUB_APP_PRIVATE_KEY !== ""
             ? process.env.GITHUB_APP_PRIVATE_KEY
             : undefined);
-        if (source === undefined) {
-            throw new Error("githubChannel: GITHUB_APP_PRIVATE_KEY is required.");
-        }
-        const value = yield resolveCredentialValue(source);
-        if (value === undefined) {
-            throw new Error("githubChannel: GITHUB_APP_PRIVATE_KEY is required.");
-        }
-        return value.replace(/\\n/gu, "\n");
-    });
+    if (source === undefined) {
+        throw new Error("githubChannel: GITHUB_APP_PRIVATE_KEY is required.");
+    }
+    const value = await resolveCredentialValue(source);
+    if (value === undefined) {
+        throw new Error("githubChannel: GITHUB_APP_PRIVATE_KEY is required.");
+    }
+    return value.replace(/\\n/gu, "\n");
 }
 /**
  * Mint an installation access token via `@octokit/auth-app`.
  * Prefer {@link createGitHubOctokit} for normal API work — this is for
  * callers that only need the raw token string.
  */
-export function createGitHubInstallationToken(input) {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a;
-        const appId = yield resolveGitHubAppId(input.appId);
-        const privateKey = yield resolveGitHubPrivateKey(input.privateKey);
-        // Prefer createGitHubOctokit for API work — this path only mints a raw
-        // token. Custom fetch belongs on the Octokit client, not createAppAuth
-        // (StrategyOptions.request expects a full RequestInterface).
-        const auth = createAppAuth(Object.assign({ appId,
-            privateKey }, (((_a = input.api) === null || _a === void 0 ? void 0 : _a.apiBaseUrl) === undefined ? {} : { baseUrl: input.api.apiBaseUrl })));
-        try {
-            const result = yield auth({
-                type: "installation",
-                installationId: input.installationId,
-            });
-            return result.token;
-        }
-        catch (error) {
-            throw installationTokenMintError(error, {
-                appId,
-                installationId: input.installationId,
-            });
-        }
+export async function createGitHubInstallationToken(input) {
+    const appId = await resolveGitHubAppId(input.appId);
+    const privateKey = await resolveGitHubPrivateKey(input.privateKey);
+    // Prefer createGitHubOctokit for API work — this path only mints a raw
+    // token. Custom fetch belongs on the Octokit client, not createAppAuth
+    // (StrategyOptions.request expects a full RequestInterface).
+    const auth = createAppAuth({
+        appId,
+        privateKey,
+        ...(input.api?.apiBaseUrl === undefined ? {} : { baseUrl: input.api.apiBaseUrl }),
     });
+    try {
+        const result = await auth({
+            type: "installation",
+            installationId: input.installationId,
+        });
+        return result.token;
+    }
+    catch (error) {
+        throw installationTokenMintError(error, {
+            appId,
+            installationId: input.installationId,
+        });
+    }
 }
 /**
  * Octokit's bare mint failure ("Not Found - <docs url>") names neither the
@@ -236,23 +222,20 @@ function installationTokenMintError(error, context) {
  * agent-serve). Intended for serve warmup when auth source is `app`.
  * Returns whether `GH_TOKEN` was written; refreshes on an interval.
  */
-export function ensureGhCliTokenEnv() {
-    return __awaiter(this, void 0, void 0, function* () {
-        var _a;
-        const token = yield tryResolveGitHubAccessToken({});
-        if (token === undefined) {
-            return false;
-        }
-        process.env.GH_TOKEN = token;
-        if (ghCliTokenRefreshTimer === null) {
-            const timer = setInterval(() => {
-                void ensureGhCliTokenEnv();
-            }, GH_CLI_TOKEN_REFRESH_MS);
-            (_a = timer.unref) === null || _a === void 0 ? void 0 : _a.call(timer);
-            ghCliTokenRefreshTimer = timer;
-        }
-        return true;
-    });
+export async function ensureGhCliTokenEnv() {
+    const token = await tryResolveGitHubAccessToken({});
+    if (token === undefined) {
+        return false;
+    }
+    process.env.GH_TOKEN = token;
+    if (ghCliTokenRefreshTimer === null) {
+        const timer = setInterval(() => {
+            void ensureGhCliTokenEnv();
+        }, GH_CLI_TOKEN_REFRESH_MS);
+        timer.unref?.();
+        ghCliTokenRefreshTimer = timer;
+    }
+    return true;
 }
 /** Clears in-memory caches. Intended for tests. */
 export function clearGitHubAuthCaches() {

package/dist/channels/github/binding.js

@@ -1,15 +1,6 @@
 /**
  * Rebuild GitHub API + thread handles for inbound hooks and stream events.
  */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 import { callGitHubApi, createGitHubCommitStatus, createGitHubIssueComment, createGitHubOctokit, createGitHubReaction, createGitHubReviewCommentReply, } from "./api.js";
 import { createGitHubCheck } from "./checks.js";
 /** Hidden marker on outbound GitHub comments so inbound dispatch ignores them. */
@@ -21,17 +12,22 @@ export function formatGitHubOutboundComment(body) {
     return `${body.trimEnd()}\n\n${GITHUB_OUTBOUND_MARKER}`;
 }
 export function buildGitHubBinding(input) {
-    var _a, _b;
     const { config, state } = input;
-    const repository = Object.assign({ fullName: `${state.owner}/${state.repo}`, url: (_a = state.repositoryUrl) !== null && _a !== void 0 ? _a : `https://github.com/${state.owner}/${state.repo}`, owner: state.owner, name: state.repo }, (state.repositoryId === null ? {} : { id: state.repositoryId }));
-    const installationId = (_b = state.installationId) !== null && _b !== void 0 ? _b : undefined;
+    const repository = {
+        fullName: `${state.owner}/${state.repo}`,
+        url: state.repositoryUrl ?? `https://github.com/${state.owner}/${state.repo}`,
+        owner: state.owner,
+        name: state.repo,
+        ...(state.repositoryId === null ? {} : { id: state.repositoryId }),
+    };
+    const installationId = state.installationId ?? undefined;
     let octokitPromise;
     const getOctokit = () => {
-        octokitPromise !== null && octokitPromise !== void 0 ? octokitPromise : (octokitPromise = createGitHubOctokit({
+        octokitPromise ??= createGitHubOctokit({
             api: config.api,
             credentials: config.credentials,
             installationId,
-        }));
+        });
         return octokitPromise;
     };
     const github = {
@@ -49,21 +45,36 @@ export function buildGitHubBinding(input) {
             });
         },
         createStatus(status) {
-            return createGitHubCommitStatus(Object.assign(Object.assign(Object.assign({ api: config.api, credentials: config.credentials, installationId, owner: state.owner, repo: state.repo, sha: status.sha, state: status.state }, (status.context === undefined ? {} : { context: status.context })), (status.description === undefined ? {} : { description: status.description })), (status.targetUrl === undefined ? {} : { targetUrl: status.targetUrl })));
+            return createGitHubCommitStatus({
+                api: config.api,
+                credentials: config.credentials,
+                installationId,
+                owner: state.owner,
+                repo: state.repo,
+                sha: status.sha,
+                state: status.state,
+                ...(status.context === undefined ? {} : { context: status.context }),
+                ...(status.description === undefined ? {} : { description: status.description }),
+                ...(status.targetUrl === undefined ? {} : { targetUrl: status.targetUrl }),
+            });
         },
         createCheck(check) {
-            return createGitHubCheck(Object.assign(Object.assign({}, check), { github: { getOctokit }, owner: state.owner, repo: state.repo }));
+            return createGitHubCheck({
+                ...check,
+                github: { getOctokit },
+                owner: state.owner,
+                repo: state.repo,
+            });
         },
     };
     const thread = {
         kind: state.conversationKind,
         post(message) {
-            var _a, _b;
             if (state.conversationKind === "review_thread") {
                 return createGitHubReviewCommentReply({
                     api: config.api,
                     body: message,
-                    commentId: requiredNumber((_a = state.reviewThreadRootCommentId) !== null && _a !== void 0 ? _a : state.reviewCommentId, "reviewThreadRootCommentId"),
+                    commentId: requiredNumber(state.reviewThreadRootCommentId ?? state.reviewCommentId, "reviewThreadRootCommentId"),
                     credentials: config.credentials,
                     installationId,
                     owner: state.owner,
@@ -76,31 +87,29 @@ export function buildGitHubBinding(input) {
                 body: message,
                 credentials: config.credentials,
                 installationId,
-                issueNumber: requiredNumber((_b = state.issueNumber) !== null && _b !== void 0 ? _b : state.pullRequestNumber, "issueNumber"),
+                issueNumber: requiredNumber(state.issueNumber ?? state.pullRequestNumber, "issueNumber"),
                 owner: state.owner,
                 repo: state.repo,
             });
         },
-        react(content) {
-            return __awaiter(this, void 0, void 0, function* () {
-                const commentId = state.conversationKind === "review_thread"
-                    ? state.reviewCommentId
-                    : state.triggeringCommentId;
-                if (commentId === null) {
-                    return;
-                }
-                yield createGitHubReaction({
-                    api: config.api,
-                    commentId,
-                    content,
-                    credentials: config.credentials,
-                    installationId,
-                    owner: state.owner,
-                    repo: state.repo,
-                    subject: state.conversationKind === "review_thread"
-                        ? "pull_request_review_comment"
-                        : "issue_comment",
-                });
+        async react(content) {
+            const commentId = state.conversationKind === "review_thread"
+                ? state.reviewCommentId
+                : state.triggeringCommentId;
+            if (commentId === null) {
+                return;
+            }
+            await createGitHubReaction({
+                api: config.api,
+                commentId,
+                content,
+                credentials: config.credentials,
+                installationId,
+                owner: state.owner,
+                repo: state.repo,
+                subject: state.conversationKind === "review_thread"
+                    ? "pull_request_review_comment"
+                    : "issue_comment",
             });
         },
     };

package/dist/channels/github/checks.js

@@ -12,15 +12,6 @@
  * `contents-write` tier; GitHub App / PAT credentials need the equivalent
  * permission. API failures are normalized into `GitHubApiError`.
  */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
 import { openCiCheck, resumeCiCheck, } from "../checks.js";
 import { wrapOctokitError } from "./api.js";
 /**
@@ -29,8 +20,8 @@ import { wrapOctokitError } from "./api.js";
  */
 function githubCheckWriter(input) {
     let checkRunId = input.checkRunId;
-    return (write) => __awaiter(this, void 0, void 0, function* () {
-        const octokit = yield input.github.getOctokit();
+    return async (write) => {
+        const octokit = await input.github.getOctokit();
         const base = {
             owner: input.owner,
             repo: input.repo,
@@ -46,7 +37,11 @@ function githubCheckWriter(input) {
                 throw new Error("githubChannel: cannot create a check without a sha.");
             }
             try {
-                const response = yield octokit.rest.checks.create(Object.assign(Object.assign({}, base), { head_sha: input.sha, started_at: write.startedAt }));
+                const response = await octokit.rest.checks.create({
+                    ...base,
+                    head_sha: input.sha,
+                    started_at: write.startedAt,
+                });
                 checkRunId = response.data.id;
                 return {
                     id: response.data.id,
@@ -58,13 +53,13 @@ function githubCheckWriter(input) {
             }
         }
         try {
-            yield octokit.rest.checks.update(Object.assign(Object.assign({}, base), { check_run_id: checkRunId }));
+            await octokit.rest.checks.update({ ...base, check_run_id: checkRunId });
             return undefined;
         }
         catch (error) {
             throw wrapOctokitError(error, "PATCH", `/repos/${input.owner}/${input.repo}/check-runs/${checkRunId}`);
         }
-    });
+    };
 }
 /**
  * Create a CI check run on a commit and return a handle for later updates.

package/dist/channels/github/cursor-account.js

@@ -27,8 +27,6 @@ export function parseCursorGithubPermissions(value, fallback = "pr-write") {
  * `--repo` / channel `{ repos }`).
  */
 export function githubRepoFromOctokitRequest(request) {
-    var _a, _b;
-    var _c, _d;
     if (typeof request.owner === "string" && typeof request.repo === "string") {
         const slug = `${request.owner.trim()}/${request.repo.trim()}`.toLowerCase();
         if (CURSOR_GITHUB_REPO_PATTERN.test(slug) && !slug.includes("..")) {
@@ -39,8 +37,8 @@ export function githubRepoFromOctokitRequest(request) {
         return undefined;
     }
     const match = request.url.match(/\/repos\/([^/?#]+)\/([^/?#]+)/);
-    const owner = (_c = (_a = match === null || match === void 0 ? void 0 : match[1]) === null || _a === void 0 ? void 0 : _a.trim()) !== null && _c !== void 0 ? _c : "";
-    const repo = (_d = (_b = match === null || match === void 0 ? void 0 : match[2]) === null || _b === void 0 ? void 0 : _b.trim()) !== null && _d !== void 0 ? _d : "";
+    const owner = match?.[1]?.trim() ?? "";
+    const repo = match?.[2]?.trim() ?? "";
     if (owner === "" || repo === "" || owner.includes("{") || repo.includes("{")) {
         return undefined;
     }
@@ -64,7 +62,6 @@ export function resolveCursorGithubCredentialScope(values, permissions = "pr-wri
     return parseCursorGithubRepoScope(repos, permissions);
 }
 export function parseCursorGithubRepoScope(values, permissions = "pr-write") {
-    var _a;
     const repos = [...new Set(values.map(repo => repo.trim().toLowerCase()).filter(Boolean))];
     if (repos.length === 0) {
         throw new Error("Cursor account GitHub credentials require at least one repository.");
@@ -77,7 +74,7 @@ export function parseCursorGithubRepoScope(values, permissions = "pr-write") {
             throw new Error(`Invalid Cursor account GitHub repository "${repo}"; expected owner/repo.`);
         }
     }
-    const owner = (_a = repos[0]) === null || _a === void 0 ? void 0 : _a.split("/", 1)[0];
+    const owner = repos[0]?.split("/", 1)[0];
     if (owner === undefined) {
         throw new Error("Cursor account GitHub repository owner is missing.");
     }
@@ -97,9 +94,8 @@ export function parseCursorGithubRepoScope(values, permissions = "pr-write") {
  * post Checks API runs. `"read"` cannot post merge-box checks.
  */
 export function cursorGithubPermissionsForChannel(options, authored = "pr-write") {
-    var _a;
-    const base = authored !== null && authored !== void 0 ? authored : "pr-write";
-    const commitStatus = (_a = options.progress) === null || _a === void 0 ? void 0 : _a.commitStatus;
+    const base = authored ?? "pr-write";
+    const commitStatus = options.progress?.commitStatus;
     const wantsChecks = options.checks === true || (commitStatus !== undefined && commitStatus !== false);
     if (!wantsChecks) {
         return base;
@@ -142,8 +138,7 @@ export function createCursorGithubProxyHostResolver(input) {
 }
 /** Proxy transport for a resolver's credentials, when the host bound one. */
 export function getCursorAccountGithubProxyTransport(resolver) {
-    var _a;
-    return (_a = pendingByResolver.get(resolver)) === null || _a === void 0 ? void 0 : _a.getProxyTransport();
+    return pendingByResolver.get(resolver)?.getProxyTransport();
 }
 const pendingByResolver = new WeakMap();
 /**