@databricks-solutions/lakebase-scm-utils 0.3.9 → 0.3.11

package/dist/{pr-e-E4aP4j.d.cts → pr-D-eayWyJ.d.cts}

@@ -1,3 +1,61 @@
+declare class GitHubRepoError extends Error {
+    readonly status?: number;
+    constructor(message: string, status?: number);
+}
+/** Returns the GitHub login of the currently authenticated user. */
+declare function getCurrentUser(): Promise<string>;
+interface GitHubScopeStatus {
+    /** Granted OAuth scopes, or null when the token exposes NONE — a fine-grained
+     *  PAT or GitHub App token carries no OAuth scope header; its permissions
+     *  aren't a scope set, so callers MUST treat null as "unknown", never a miss. */
+    granted: string[] | null;
+    /** Required scopes absent from `granted` (empty when `granted` is null). */
+    missing: string[];
+}
+/**
+ * Read the authenticated token's granted OAuth scopes from the GitHub API
+ * `x-oauth-scopes` response header and diff them against `required`. A classic
+ * OAuth/PAT token returns a (possibly empty) comma-separated header; a
+ * fine-grained PAT / GitHub App token omits it entirely → `granted: null`.
+ * Reading your own user needs no special scope, so this succeeds for any VALID
+ * token regardless of scopes (and throws, like the other ops, on a bad token /
+ * network error — callers decide whether that is blocking).
+ */
+declare function checkGitHubScopes(required?: readonly string[]): Promise<GitHubScopeStatus>;
+interface CreateRepoOptions {
+    /** Make the repo private. Default: true. */
+    private?: boolean;
+    description?: string;
+}
+/**
+ * Create a new GitHub repository. Accepts either bare name (creates for the
+ * authenticated user) or "owner/name" (creates in org if owner != login).
+ *
+ * @returns the repo HTML URL.
+ */
+declare function createRepo(name: string, opts?: CreateRepoOptions): Promise<string>;
+/** Delete a GitHub repository. Requires the `delete_repo` OAuth scope. */
+declare function deleteRepo(name: string): Promise<void>;
+/** True iff the repository exists and is visible to the authenticated user. */
+declare function repoExists(name: string): Promise<boolean>;
+/**
+ * Whether GitHub Actions is enabled for `ownerRepo`. `GET .../actions/permissions`
+ * returns `enabled:false` both when a repo admin disabled Actions AND when an org
+ * policy disables it for the repo. When Actions is off, the kit's CI workflows
+ * (pr.yml / merge.yml) silently never run, which presents as "CI didn't follow
+ * the kit workflow". Returns:
+ *   - true / false  : the determined state
+ *   - undefined     : couldn't determine (no token, repo invisible, API error) ,
+ *                     callers must treat this as "unknown", never as disabled,
+ *                     so a missing token never produces a false alarm.
+ */
+declare function getActionsEnabled(ownerRepo: string): Promise<boolean | undefined>;
+/**
+ * Resolve the canonical `owner/repo` slug. Used by create-project to poll
+ * until a freshly-created repo is visible (SAML / propagation delays).
+ */
+declare function getRepoFullName(name: string): Promise<string>;
+
 declare class GitHubPullRequestError extends Error {
     readonly status?: number | undefined;
     constructor(message: string, status?: number | undefined);
@@ -172,4 +230,4 @@ interface MergePairedPullRequestResult {
  */
 declare function mergePairedPullRequest(args: MergePairedPullRequestArgs): Promise<MergePairedPullRequestResult>;
 
-export { type CreatePullRequestArgs as C, type FastForwardBranchArgs as F, GitHubPullRequestError as G, type MergePairedPullRequestArgs as M, type PullRequestCheck as P, type WorkflowRunSummary as W, type MergePairedPullRequestResult as a, type MergePullRequestArgs as b, type MergePullRequestResult as c, type PullRequestFile as d, type PullRequestInfo as e, type PullRequestReview as f, createPullRequest as g, fastForwardBranch as h, getPullRequest as i, getPullRequestComments as j, getPullRequestFiles as k, getPullRequestReviews as l, listIssueComments as m, listWorkflowRuns as n, mergePairedPullRequest as o, mergePullRequest as p };
+export { type CreatePullRequestArgs as C, type FastForwardBranchArgs as F, GitHubPullRequestError as G, type MergePairedPullRequestArgs as M, type PullRequestCheck as P, type WorkflowRunSummary as W, type CreateRepoOptions as a, GitHubRepoError as b, type GitHubScopeStatus as c, type MergePairedPullRequestResult as d, type MergePullRequestArgs as e, type MergePullRequestResult as f, type PullRequestFile as g, type PullRequestInfo as h, type PullRequestReview as i, checkGitHubScopes as j, createPullRequest as k, createRepo as l, deleteRepo as m, fastForwardBranch as n, getActionsEnabled as o, getCurrentUser as p, getPullRequest as q, getPullRequestComments as r, getPullRequestFiles as s, getPullRequestReviews as t, getRepoFullName as u, listIssueComments as v, listWorkflowRuns as w, mergePairedPullRequest as x, mergePullRequest as y, repoExists as z };

package/dist/{pr-e-E4aP4j.d.ts → pr-D-eayWyJ.d.ts}

@@ -1,3 +1,61 @@
+declare class GitHubRepoError extends Error {
+    readonly status?: number;
+    constructor(message: string, status?: number);
+}
+/** Returns the GitHub login of the currently authenticated user. */
+declare function getCurrentUser(): Promise<string>;
+interface GitHubScopeStatus {
+    /** Granted OAuth scopes, or null when the token exposes NONE — a fine-grained
+     *  PAT or GitHub App token carries no OAuth scope header; its permissions
+     *  aren't a scope set, so callers MUST treat null as "unknown", never a miss. */
+    granted: string[] | null;
+    /** Required scopes absent from `granted` (empty when `granted` is null). */
+    missing: string[];
+}
+/**
+ * Read the authenticated token's granted OAuth scopes from the GitHub API
+ * `x-oauth-scopes` response header and diff them against `required`. A classic
+ * OAuth/PAT token returns a (possibly empty) comma-separated header; a
+ * fine-grained PAT / GitHub App token omits it entirely → `granted: null`.
+ * Reading your own user needs no special scope, so this succeeds for any VALID
+ * token regardless of scopes (and throws, like the other ops, on a bad token /
+ * network error — callers decide whether that is blocking).
+ */
+declare function checkGitHubScopes(required?: readonly string[]): Promise<GitHubScopeStatus>;
+interface CreateRepoOptions {
+    /** Make the repo private. Default: true. */
+    private?: boolean;
+    description?: string;
+}
+/**
+ * Create a new GitHub repository. Accepts either bare name (creates for the
+ * authenticated user) or "owner/name" (creates in org if owner != login).
+ *
+ * @returns the repo HTML URL.
+ */
+declare function createRepo(name: string, opts?: CreateRepoOptions): Promise<string>;
+/** Delete a GitHub repository. Requires the `delete_repo` OAuth scope. */
+declare function deleteRepo(name: string): Promise<void>;
+/** True iff the repository exists and is visible to the authenticated user. */
+declare function repoExists(name: string): Promise<boolean>;
+/**
+ * Whether GitHub Actions is enabled for `ownerRepo`. `GET .../actions/permissions`
+ * returns `enabled:false` both when a repo admin disabled Actions AND when an org
+ * policy disables it for the repo. When Actions is off, the kit's CI workflows
+ * (pr.yml / merge.yml) silently never run, which presents as "CI didn't follow
+ * the kit workflow". Returns:
+ *   - true / false  : the determined state
+ *   - undefined     : couldn't determine (no token, repo invisible, API error) ,
+ *                     callers must treat this as "unknown", never as disabled,
+ *                     so a missing token never produces a false alarm.
+ */
+declare function getActionsEnabled(ownerRepo: string): Promise<boolean | undefined>;
+/**
+ * Resolve the canonical `owner/repo` slug. Used by create-project to poll
+ * until a freshly-created repo is visible (SAML / propagation delays).
+ */
+declare function getRepoFullName(name: string): Promise<string>;
+
 declare class GitHubPullRequestError extends Error {
     readonly status?: number | undefined;
     constructor(message: string, status?: number | undefined);
@@ -172,4 +230,4 @@ interface MergePairedPullRequestResult {
  */
 declare function mergePairedPullRequest(args: MergePairedPullRequestArgs): Promise<MergePairedPullRequestResult>;
 
-export { type CreatePullRequestArgs as C, type FastForwardBranchArgs as F, GitHubPullRequestError as G, type MergePairedPullRequestArgs as M, type PullRequestCheck as P, type WorkflowRunSummary as W, type MergePairedPullRequestResult as a, type MergePullRequestArgs as b, type MergePullRequestResult as c, type PullRequestFile as d, type PullRequestInfo as e, type PullRequestReview as f, createPullRequest as g, fastForwardBranch as h, getPullRequest as i, getPullRequestComments as j, getPullRequestFiles as k, getPullRequestReviews as l, listIssueComments as m, listWorkflowRuns as n, mergePairedPullRequest as o, mergePullRequest as p };
+export { type CreatePullRequestArgs as C, type FastForwardBranchArgs as F, GitHubPullRequestError as G, type MergePairedPullRequestArgs as M, type PullRequestCheck as P, type WorkflowRunSummary as W, type CreateRepoOptions as a, GitHubRepoError as b, type GitHubScopeStatus as c, type MergePairedPullRequestResult as d, type MergePullRequestArgs as e, type MergePullRequestResult as f, type PullRequestFile as g, type PullRequestInfo as h, type PullRequestReview as i, checkGitHubScopes as j, createPullRequest as k, createRepo as l, deleteRepo as m, fastForwardBranch as n, getActionsEnabled as o, getCurrentUser as p, getPullRequest as q, getPullRequestComments as r, getPullRequestFiles as s, getPullRequestReviews as t, getRepoFullName as u, listIssueComments as v, listWorkflowRuns as w, mergePairedPullRequest as x, mergePullRequest as y, repoExists as z };

package/dist/scripts/git/index.cjs

@@ -44,6 +44,7 @@ __export(git_exports, {
   commitAllSignedOff: () => commitAllSignedOff,
   commitAmend: () => commitAmend,
   commitAndPush: () => commitAndPush,
+  commitInitial: () => commitInitial,
   commitSignedOff: () => commitSignedOff,
   createTag: () => createTag,
   createWorktree: () => createWorktree,
@@ -88,6 +89,7 @@ __export(git_exports, {
   pullRebase: () => pullRebase,
   push: () => push,
   pushCurrentBranchForPr: () => pushCurrentBranchForPr,
+  pushInitial: () => pushInitial,
   pushTo: () => pushTo,
   rebaseBranch: () => rebaseBranch,
   removeRemote: () => removeRemote,
@@ -161,26 +163,38 @@ To finish:
   }
 };
 async function commitAndPush(args) {
-  await exec2("git add -A", { cwd: args.projectDir });
-  await exec2(`git commit -m ${JSON.stringify(args.message)}`, {
-    cwd: args.projectDir,
+  await commitInitial(args.projectDir, args.message);
+  if (args.push === false) return;
+  await pushInitial({ projectDir: args.projectDir, remote: args.remote, branch: args.branch });
+}
+async function commitInitial(projectDir, message) {
+  await exec2("git add -A", { cwd: projectDir });
+  await exec2(`git commit -m ${JSON.stringify(message)}`, {
+    cwd: projectDir,
     timeout: 3e4
   });
-  if (args.push === false) return;
+}
+async function pushInitial(args) {
   const remote = args.remote ?? "origin";
   const branch = args.branch ?? "main";
-  try {
-    await exec2(`git push -u ${remote} ${branch}`, {
-      cwd: args.projectDir,
-      timeout: 3e4
-    });
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    if (/without `?workflow`? scope|workflow scope/i.test(msg)) {
-      throw new WorkflowScopeError(args.projectDir);
+  const attempts = Math.max(1, args.attempts ?? 1);
+  const sleep = args.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const run = args.run ?? ((cmd, cwd) => exec2(cmd, { cwd, timeout: 3e4 }).then(() => void 0));
+  let lastErr;
+  for (let i = 1; i <= attempts; i++) {
+    try {
+      await run(`git push -u ${remote} ${branch}`, args.projectDir);
+      return;
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      if (/without `?workflow`? scope|workflow scope/i.test(msg)) {
+        throw new WorkflowScopeError(args.projectDir);
+      }
+      lastErr = err;
+      if (i < attempts) await sleep(args.delayMs ?? 1500);
     }
-    throw err;
   }
+  throw lastErr instanceof Error ? lastErr : new Error(String(lastErr));
 }
 
 // scripts/util/parse-owner-repo.ts
@@ -984,6 +998,7 @@ async function cherryPick(args) {
   commitAllSignedOff,
   commitAmend,
   commitAndPush,
+  commitInitial,
   commitSignedOff,
   createTag,
   createWorktree,
@@ -1028,6 +1043,7 @@ async function cherryPick(args) {
   pullRebase,
   push,
   pushCurrentBranchForPr,
+  pushInitial,
   pushTo,
   rebaseBranch,
   removeRemote,

package/dist/scripts/git/index.d.cts

@@ -56,6 +56,37 @@ declare class WorkflowScopeError extends Error {
  * For non-initial-commit flows, prefer the primitives in ./commits.ts.
  */
 declare function commitAndPush(args: CommitAndPushArgs): Promise<void>;
+/** Stage everything and make the initial commit (no push). */
+declare function commitInitial(projectDir: string, message: string): Promise<void>;
+interface PushInitialArgs {
+    projectDir: string;
+    /** Remote name. Default: "origin". */
+    remote?: string;
+    /** Branch name. Default: "main". */
+    branch?: string;
+    /**
+     * Total push attempts (>= 1). Default 1 (preserves commitAndPush's behavior).
+     * The create flow passes 2: the FIRST push fires the project's pre-push hook,
+     * which triggers the one-time cold download of the Consort toolkit — that race
+     * can fail the push, but the toolkit is CACHED afterward, so a single retry then
+     * sails through (the cold-download incident). A `workflow`-scope rejection is a
+     * real auth gap, never retried.
+     */
+    attempts?: number;
+    /** Delay between attempts (ms). Default 1500. Injected in tests. */
+    delayMs?: number;
+    /** Injectable sleep (tests). */
+    sleep?: (ms: number) => Promise<void>;
+    /** Injectable runner (tests); defaults to the real `git push`. */
+    run?: (cmd: string, cwd: string) => Promise<void>;
+}
+/**
+ * Push the initial branch with `-u`, retrying a transient failure up to
+ * `attempts` times. Maps the GitHub `workflow`-scope rejection to
+ * {@link WorkflowScopeError} (thrown immediately, never retried). Throws the last
+ * error after the final attempt.
+ */
+declare function pushInitial(args: PushInitialArgs): Promise<void>;
 
 interface AddRemoteArgs {
     cwd: string;
@@ -763,4 +794,4 @@ declare function revert(args: ShaArgs): Promise<void>;
 /** `git cherry-pick <sha>`. */
 declare function cherryPick(args: ShaArgs): Promise<void>;
 
-export { type AddRemoteArgs, type AheadBehind, type AmendArgs, type BranchesAtCommitArgs, type CheckoutBranchArgs, type CloneRepoArgs, type CommitAllArgs, type CommitAndPushArgs, type CommitArgs, type CommitFilesArgs, type CreateTagArgs, type CreateWorktreeArgs, type CwdOnlyArgs, type DeleteLocalBranchArgs, type DeleteRemoteBranchArgs, type DeleteRemoteTagArgs, type DeleteTagArgs, type DiffFilesArgs, type DiscardAllChangesArgs, type FetchArgs, type FileChangeShort, type GetFileAtRefArgs, type GetMergeBaseArgs, type GitBranchInfo, type HasRemoteBranchArgs, type IsDirtyArgs, type ListLocalBranchesArgs, type ListMigrationsOnBranchArgs, type ListRemoteBranchesArgs, type LogRawArgs, type MergeBranchArgs, type MergeCommit, type NearestParent, type OutgoingIncomingArgs, ProtectedBranchError, type PublishBranchArgs, type PullFromArgs, type PushCurrentBranchForPrArgs, type PushToArgs, type RebaseBranchArgs, type RecentMergesArgs, type RemoveRemoteArgs, type RemoveWorktreeArgs, type RenameBranchArgs, type ResolveNearestParentArgs, type ShaArgs, type StashIndexArgs, type StashWithMessageArgs, type UndoLastCommitArgs, WorkflowScopeError, abortRebase, addRemote, checkoutBranch, checkoutDetached, cherryPick, cloneRepo, commit, commitAll, commitAllIfChanged, commitAllSignedOff, commitAmend, commitAndPush, commitSignedOff, createTag, createWorktree, deleteLocalBranch, deleteRemoteBranch, deleteRemoteTag, deleteTag, discardAllChanges, fetch, getAheadBehind, getBranchesAtCommit, getCommitFiles, getCurrentBranch, getDiffFiles, getFileAtRef, getGitHubUrl, getIncomingCommits, getLogRaw, getLogShortstat, getMergeBase, getNearestParentName, getOutgoingCommits, getOwnerRepo, getRecentMerges, getRepoRoot, gitBranchExists, gitInit, hasRemoteBranch, hasUpstream, isDirty, isRebasing, listLocalBranches, listMigrationsOnBranch, listRemoteBranches, listRemotes, listTags, listWorktrees, mergeBranch, publishBranch, pull, pullFrom, pullRebase, push, pushCurrentBranchForPr, pushTo, rebaseBranch, removeRemote, removeWorktree, renameBranch, resolveDefaultBranch, resolveNearestParent, revert, stash, stashApply, stashDrop, stashDropAll, stashIncludeUntracked, stashList, stashPop, stashStaged, sync, undoLastCommit };
+export { type AddRemoteArgs, type AheadBehind, type AmendArgs, type BranchesAtCommitArgs, type CheckoutBranchArgs, type CloneRepoArgs, type CommitAllArgs, type CommitAndPushArgs, type CommitArgs, type CommitFilesArgs, type CreateTagArgs, type CreateWorktreeArgs, type CwdOnlyArgs, type DeleteLocalBranchArgs, type DeleteRemoteBranchArgs, type DeleteRemoteTagArgs, type DeleteTagArgs, type DiffFilesArgs, type DiscardAllChangesArgs, type FetchArgs, type FileChangeShort, type GetFileAtRefArgs, type GetMergeBaseArgs, type GitBranchInfo, type HasRemoteBranchArgs, type IsDirtyArgs, type ListLocalBranchesArgs, type ListMigrationsOnBranchArgs, type ListRemoteBranchesArgs, type LogRawArgs, type MergeBranchArgs, type MergeCommit, type NearestParent, type OutgoingIncomingArgs, ProtectedBranchError, type PublishBranchArgs, type PullFromArgs, type PushCurrentBranchForPrArgs, type PushInitialArgs, type PushToArgs, type RebaseBranchArgs, type RecentMergesArgs, type RemoveRemoteArgs, type RemoveWorktreeArgs, type RenameBranchArgs, type ResolveNearestParentArgs, type ShaArgs, type StashIndexArgs, type StashWithMessageArgs, type UndoLastCommitArgs, WorkflowScopeError, abortRebase, addRemote, checkoutBranch, checkoutDetached, cherryPick, cloneRepo, commit, commitAll, commitAllIfChanged, commitAllSignedOff, commitAmend, commitAndPush, commitInitial, commitSignedOff, createTag, createWorktree, deleteLocalBranch, deleteRemoteBranch, deleteRemoteTag, deleteTag, discardAllChanges, fetch, getAheadBehind, getBranchesAtCommit, getCommitFiles, getCurrentBranch, getDiffFiles, getFileAtRef, getGitHubUrl, getIncomingCommits, getLogRaw, getLogShortstat, getMergeBase, getNearestParentName, getOutgoingCommits, getOwnerRepo, getRecentMerges, getRepoRoot, gitBranchExists, gitInit, hasRemoteBranch, hasUpstream, isDirty, isRebasing, listLocalBranches, listMigrationsOnBranch, listRemoteBranches, listRemotes, listTags, listWorktrees, mergeBranch, publishBranch, pull, pullFrom, pullRebase, push, pushCurrentBranchForPr, pushInitial, pushTo, rebaseBranch, removeRemote, removeWorktree, renameBranch, resolveDefaultBranch, resolveNearestParent, revert, stash, stashApply, stashDrop, stashDropAll, stashIncludeUntracked, stashList, stashPop, stashStaged, sync, undoLastCommit };

package/dist/scripts/git/index.d.ts

@@ -56,6 +56,37 @@ declare class WorkflowScopeError extends Error {
  * For non-initial-commit flows, prefer the primitives in ./commits.ts.
  */
 declare function commitAndPush(args: CommitAndPushArgs): Promise<void>;
+/** Stage everything and make the initial commit (no push). */
+declare function commitInitial(projectDir: string, message: string): Promise<void>;
+interface PushInitialArgs {
+    projectDir: string;
+    /** Remote name. Default: "origin". */
+    remote?: string;
+    /** Branch name. Default: "main". */
+    branch?: string;
+    /**
+     * Total push attempts (>= 1). Default 1 (preserves commitAndPush's behavior).
+     * The create flow passes 2: the FIRST push fires the project's pre-push hook,
+     * which triggers the one-time cold download of the Consort toolkit — that race
+     * can fail the push, but the toolkit is CACHED afterward, so a single retry then
+     * sails through (the cold-download incident). A `workflow`-scope rejection is a
+     * real auth gap, never retried.
+     */
+    attempts?: number;
+    /** Delay between attempts (ms). Default 1500. Injected in tests. */
+    delayMs?: number;
+    /** Injectable sleep (tests). */
+    sleep?: (ms: number) => Promise<void>;
+    /** Injectable runner (tests); defaults to the real `git push`. */
+    run?: (cmd: string, cwd: string) => Promise<void>;
+}
+/**
+ * Push the initial branch with `-u`, retrying a transient failure up to
+ * `attempts` times. Maps the GitHub `workflow`-scope rejection to
+ * {@link WorkflowScopeError} (thrown immediately, never retried). Throws the last
+ * error after the final attempt.
+ */
+declare function pushInitial(args: PushInitialArgs): Promise<void>;
 
 interface AddRemoteArgs {
     cwd: string;
@@ -763,4 +794,4 @@ declare function revert(args: ShaArgs): Promise<void>;
 /** `git cherry-pick <sha>`. */
 declare function cherryPick(args: ShaArgs): Promise<void>;
 
-export { type AddRemoteArgs, type AheadBehind, type AmendArgs, type BranchesAtCommitArgs, type CheckoutBranchArgs, type CloneRepoArgs, type CommitAllArgs, type CommitAndPushArgs, type CommitArgs, type CommitFilesArgs, type CreateTagArgs, type CreateWorktreeArgs, type CwdOnlyArgs, type DeleteLocalBranchArgs, type DeleteRemoteBranchArgs, type DeleteRemoteTagArgs, type DeleteTagArgs, type DiffFilesArgs, type DiscardAllChangesArgs, type FetchArgs, type FileChangeShort, type GetFileAtRefArgs, type GetMergeBaseArgs, type GitBranchInfo, type HasRemoteBranchArgs, type IsDirtyArgs, type ListLocalBranchesArgs, type ListMigrationsOnBranchArgs, type ListRemoteBranchesArgs, type LogRawArgs, type MergeBranchArgs, type MergeCommit, type NearestParent, type OutgoingIncomingArgs, ProtectedBranchError, type PublishBranchArgs, type PullFromArgs, type PushCurrentBranchForPrArgs, type PushToArgs, type RebaseBranchArgs, type RecentMergesArgs, type RemoveRemoteArgs, type RemoveWorktreeArgs, type RenameBranchArgs, type ResolveNearestParentArgs, type ShaArgs, type StashIndexArgs, type StashWithMessageArgs, type UndoLastCommitArgs, WorkflowScopeError, abortRebase, addRemote, checkoutBranch, checkoutDetached, cherryPick, cloneRepo, commit, commitAll, commitAllIfChanged, commitAllSignedOff, commitAmend, commitAndPush, commitSignedOff, createTag, createWorktree, deleteLocalBranch, deleteRemoteBranch, deleteRemoteTag, deleteTag, discardAllChanges, fetch, getAheadBehind, getBranchesAtCommit, getCommitFiles, getCurrentBranch, getDiffFiles, getFileAtRef, getGitHubUrl, getIncomingCommits, getLogRaw, getLogShortstat, getMergeBase, getNearestParentName, getOutgoingCommits, getOwnerRepo, getRecentMerges, getRepoRoot, gitBranchExists, gitInit, hasRemoteBranch, hasUpstream, isDirty, isRebasing, listLocalBranches, listMigrationsOnBranch, listRemoteBranches, listRemotes, listTags, listWorktrees, mergeBranch, publishBranch, pull, pullFrom, pullRebase, push, pushCurrentBranchForPr, pushTo, rebaseBranch, removeRemote, removeWorktree, renameBranch, resolveDefaultBranch, resolveNearestParent, revert, stash, stashApply, stashDrop, stashDropAll, stashIncludeUntracked, stashList, stashPop, stashStaged, sync, undoLastCommit };
+export { type AddRemoteArgs, type AheadBehind, type AmendArgs, type BranchesAtCommitArgs, type CheckoutBranchArgs, type CloneRepoArgs, type CommitAllArgs, type CommitAndPushArgs, type CommitArgs, type CommitFilesArgs, type CreateTagArgs, type CreateWorktreeArgs, type CwdOnlyArgs, type DeleteLocalBranchArgs, type DeleteRemoteBranchArgs, type DeleteRemoteTagArgs, type DeleteTagArgs, type DiffFilesArgs, type DiscardAllChangesArgs, type FetchArgs, type FileChangeShort, type GetFileAtRefArgs, type GetMergeBaseArgs, type GitBranchInfo, type HasRemoteBranchArgs, type IsDirtyArgs, type ListLocalBranchesArgs, type ListMigrationsOnBranchArgs, type ListRemoteBranchesArgs, type LogRawArgs, type MergeBranchArgs, type MergeCommit, type NearestParent, type OutgoingIncomingArgs, ProtectedBranchError, type PublishBranchArgs, type PullFromArgs, type PushCurrentBranchForPrArgs, type PushInitialArgs, type PushToArgs, type RebaseBranchArgs, type RecentMergesArgs, type RemoveRemoteArgs, type RemoveWorktreeArgs, type RenameBranchArgs, type ResolveNearestParentArgs, type ShaArgs, type StashIndexArgs, type StashWithMessageArgs, type UndoLastCommitArgs, WorkflowScopeError, abortRebase, addRemote, checkoutBranch, checkoutDetached, cherryPick, cloneRepo, commit, commitAll, commitAllIfChanged, commitAllSignedOff, commitAmend, commitAndPush, commitInitial, commitSignedOff, createTag, createWorktree, deleteLocalBranch, deleteRemoteBranch, deleteRemoteTag, deleteTag, discardAllChanges, fetch, getAheadBehind, getBranchesAtCommit, getCommitFiles, getCurrentBranch, getDiffFiles, getFileAtRef, getGitHubUrl, getIncomingCommits, getLogRaw, getLogShortstat, getMergeBase, getNearestParentName, getOutgoingCommits, getOwnerRepo, getRecentMerges, getRepoRoot, gitBranchExists, gitInit, hasRemoteBranch, hasUpstream, isDirty, isRebasing, listLocalBranches, listMigrationsOnBranch, listRemoteBranches, listRemotes, listTags, listWorktrees, mergeBranch, publishBranch, pull, pullFrom, pullRebase, push, pushCurrentBranchForPr, pushInitial, pushTo, rebaseBranch, removeRemote, removeWorktree, renameBranch, resolveDefaultBranch, resolveNearestParent, revert, stash, stashApply, stashDrop, stashDropAll, stashIncludeUntracked, stashList, stashPop, stashStaged, sync, undoLastCommit };

package/dist/scripts/git/index.js

@@ -50,26 +50,38 @@ To finish:
   }
 };
 async function commitAndPush(args) {
-  await exec2("git add -A", { cwd: args.projectDir });
-  await exec2(`git commit -m ${JSON.stringify(args.message)}`, {
-    cwd: args.projectDir,
+  await commitInitial(args.projectDir, args.message);
+  if (args.push === false) return;
+  await pushInitial({ projectDir: args.projectDir, remote: args.remote, branch: args.branch });
+}
+async function commitInitial(projectDir, message) {
+  await exec2("git add -A", { cwd: projectDir });
+  await exec2(`git commit -m ${JSON.stringify(message)}`, {
+    cwd: projectDir,
     timeout: 3e4
   });
-  if (args.push === false) return;
+}
+async function pushInitial(args) {
   const remote = args.remote ?? "origin";
   const branch = args.branch ?? "main";
-  try {
-    await exec2(`git push -u ${remote} ${branch}`, {
-      cwd: args.projectDir,
-      timeout: 3e4
-    });
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    if (/without `?workflow`? scope|workflow scope/i.test(msg)) {
-      throw new WorkflowScopeError(args.projectDir);
+  const attempts = Math.max(1, args.attempts ?? 1);
+  const sleep = args.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const run = args.run ?? ((cmd, cwd) => exec2(cmd, { cwd, timeout: 3e4 }).then(() => void 0));
+  let lastErr;
+  for (let i = 1; i <= attempts; i++) {
+    try {
+      await run(`git push -u ${remote} ${branch}`, args.projectDir);
+      return;
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      if (/without `?workflow`? scope|workflow scope/i.test(msg)) {
+        throw new WorkflowScopeError(args.projectDir);
+      }
+      lastErr = err;
+      if (i < attempts) await sleep(args.delayMs ?? 1500);
     }
-    throw err;
   }
+  throw lastErr instanceof Error ? lastErr : new Error(String(lastErr));
 }
 
 // scripts/util/parse-owner-repo.ts
@@ -872,6 +884,7 @@ export {
   commitAllSignedOff,
   commitAmend,
   commitAndPush,
+  commitInitial,
   commitSignedOff,
   createTag,
   createWorktree,
@@ -916,6 +929,7 @@ export {
   pullRebase,
   push,
   pushCurrentBranchForPr,
+  pushInitial,
   pushTo,
   rebaseBranch,
   removeRemote,

package/dist/scripts/github/index.d.cts

@@ -1,4 +1,4 @@
-export { C as CreatePullRequestArgs, F as FastForwardBranchArgs, G as GitHubPullRequestError, M as MergePairedPullRequestArgs, a as MergePairedPullRequestResult, b as MergePullRequestArgs, c as MergePullRequestResult, P as PullRequestCheck, d as PullRequestFile, e as PullRequestInfo, f as PullRequestReview, W as WorkflowRunSummary, g as createPullRequest, h as fastForwardBranch, i as getPullRequest, j as getPullRequestComments, k as getPullRequestFiles, l as getPullRequestReviews, m as listIssueComments, n as listWorkflowRuns, o as mergePairedPullRequest, p as mergePullRequest } from '../../pr-e-E4aP4j.cjs';
+export { C as CreatePullRequestArgs, a as CreateRepoOptions, F as FastForwardBranchArgs, G as GitHubPullRequestError, b as GitHubRepoError, c as GitHubScopeStatus, M as MergePairedPullRequestArgs, d as MergePairedPullRequestResult, e as MergePullRequestArgs, f as MergePullRequestResult, P as PullRequestCheck, g as PullRequestFile, h as PullRequestInfo, i as PullRequestReview, W as WorkflowRunSummary, j as checkGitHubScopes, k as createPullRequest, l as createRepo, m as deleteRepo, n as fastForwardBranch, o as getActionsEnabled, p as getCurrentUser, q as getPullRequest, r as getPullRequestComments, s as getPullRequestFiles, t as getPullRequestReviews, u as getRepoFullName, v as listIssueComments, w as listWorkflowRuns, x as mergePairedPullRequest, y as mergePullRequest, z as repoExists } from '../../pr-D-eayWyJ.cjs';
 
 /** OAuth scopes the workflow ops collectively need. */
 declare const GITHUB_SCOPES: readonly ["repo", "workflow", "delete_repo"];
@@ -49,64 +49,6 @@ interface GitHubAuthDiagnosis {
     scopes: string[];
 }
 
-declare class GitHubRepoError extends Error {
-    readonly status?: number;
-    constructor(message: string, status?: number);
-}
-/** Returns the GitHub login of the currently authenticated user. */
-declare function getCurrentUser(): Promise<string>;
-interface GitHubScopeStatus {
-    /** Granted OAuth scopes, or null when the token exposes NONE — a fine-grained
-     *  PAT or GitHub App token carries no OAuth scope header; its permissions
-     *  aren't a scope set, so callers MUST treat null as "unknown", never a miss. */
-    granted: string[] | null;
-    /** Required scopes absent from `granted` (empty when `granted` is null). */
-    missing: string[];
-}
-/**
- * Read the authenticated token's granted OAuth scopes from the GitHub API
- * `x-oauth-scopes` response header and diff them against `required`. A classic
- * OAuth/PAT token returns a (possibly empty) comma-separated header; a
- * fine-grained PAT / GitHub App token omits it entirely → `granted: null`.
- * Reading your own user needs no special scope, so this succeeds for any VALID
- * token regardless of scopes (and throws, like the other ops, on a bad token /
- * network error — callers decide whether that is blocking).
- */
-declare function checkGitHubScopes(required?: readonly string[]): Promise<GitHubScopeStatus>;
-interface CreateRepoOptions {
-    /** Make the repo private. Default: true. */
-    private?: boolean;
-    description?: string;
-}
-/**
- * Create a new GitHub repository. Accepts either bare name (creates for the
- * authenticated user) or "owner/name" (creates in org if owner != login).
- *
- * @returns the repo HTML URL.
- */
-declare function createRepo(name: string, opts?: CreateRepoOptions): Promise<string>;
-/** Delete a GitHub repository. Requires the `delete_repo` OAuth scope. */
-declare function deleteRepo(name: string): Promise<void>;
-/** True iff the repository exists and is visible to the authenticated user. */
-declare function repoExists(name: string): Promise<boolean>;
-/**
- * Whether GitHub Actions is enabled for `ownerRepo`. `GET .../actions/permissions`
- * returns `enabled:false` both when a repo admin disabled Actions AND when an org
- * policy disables it for the repo. When Actions is off, the kit's CI workflows
- * (pr.yml / merge.yml) silently never run, which presents as "CI didn't follow
- * the kit workflow". Returns:
- *   - true / false  : the determined state
- *   - undefined     : couldn't determine (no token, repo invisible, API error) ,
- *                     callers must treat this as "unknown", never as disabled,
- *                     so a missing token never produces a false alarm.
- */
-declare function getActionsEnabled(ownerRepo: string): Promise<boolean | undefined>;
-/**
- * Resolve the canonical `owner/repo` slug. Used by create-project to poll
- * until a freshly-created repo is visible (SAML / propagation delays).
- */
-declare function getRepoFullName(name: string): Promise<string>;
-
 declare class GitHubRunnerError extends Error {
     readonly status?: number;
     constructor(message: string, status?: number);
@@ -145,4 +87,4 @@ declare function setRepoSecrets(ownerRepo: string, secrets: Record<string, strin
 /** List configured secret names (returns empty array on any error). */
 declare function listSecretNames(ownerRepo: string): Promise<string[]>;
 
-export { type CreateRepoOptions, GITHUB_SCOPES, type GitHubAuthDiagnosis, type GitHubAuthSource, GitHubRepoError, GitHubRunnerError, type GitHubScopeStatus, GitHubSecretsError, type RepoRunner, type VsCodeSessionOptions, checkGitHubScopes, createRegistrationToken, createRepo, deleteRepo, deleteRunner, diagnoseGitHubAuth, getActionsEnabled, getCurrentUser, getRepoFullName, getRunnerIdByName, getRunnerStatus, listRepoRunners, listSecretNames, repoExists, resolveGitHubToken, setRepoSecret, setRepoSecrets, tryGhAuthToken, tryVsCodeSession };
+export { GITHUB_SCOPES, type GitHubAuthDiagnosis, type GitHubAuthSource, GitHubRunnerError, GitHubSecretsError, type RepoRunner, type VsCodeSessionOptions, createRegistrationToken, deleteRunner, diagnoseGitHubAuth, getRunnerIdByName, getRunnerStatus, listRepoRunners, listSecretNames, resolveGitHubToken, setRepoSecret, setRepoSecrets, tryGhAuthToken, tryVsCodeSession };

package/dist/scripts/github/index.d.ts

@@ -1,4 +1,4 @@
-export { C as CreatePullRequestArgs, F as FastForwardBranchArgs, G as GitHubPullRequestError, M as MergePairedPullRequestArgs, a as MergePairedPullRequestResult, b as MergePullRequestArgs, c as MergePullRequestResult, P as PullRequestCheck, d as PullRequestFile, e as PullRequestInfo, f as PullRequestReview, W as WorkflowRunSummary, g as createPullRequest, h as fastForwardBranch, i as getPullRequest, j as getPullRequestComments, k as getPullRequestFiles, l as getPullRequestReviews, m as listIssueComments, n as listWorkflowRuns, o as mergePairedPullRequest, p as mergePullRequest } from '../../pr-e-E4aP4j.js';
+export { C as CreatePullRequestArgs, a as CreateRepoOptions, F as FastForwardBranchArgs, G as GitHubPullRequestError, b as GitHubRepoError, c as GitHubScopeStatus, M as MergePairedPullRequestArgs, d as MergePairedPullRequestResult, e as MergePullRequestArgs, f as MergePullRequestResult, P as PullRequestCheck, g as PullRequestFile, h as PullRequestInfo, i as PullRequestReview, W as WorkflowRunSummary, j as checkGitHubScopes, k as createPullRequest, l as createRepo, m as deleteRepo, n as fastForwardBranch, o as getActionsEnabled, p as getCurrentUser, q as getPullRequest, r as getPullRequestComments, s as getPullRequestFiles, t as getPullRequestReviews, u as getRepoFullName, v as listIssueComments, w as listWorkflowRuns, x as mergePairedPullRequest, y as mergePullRequest, z as repoExists } from '../../pr-D-eayWyJ.js';
 
 /** OAuth scopes the workflow ops collectively need. */
 declare const GITHUB_SCOPES: readonly ["repo", "workflow", "delete_repo"];
@@ -49,64 +49,6 @@ interface GitHubAuthDiagnosis {
     scopes: string[];
 }
 
-declare class GitHubRepoError extends Error {
-    readonly status?: number;
-    constructor(message: string, status?: number);
-}
-/** Returns the GitHub login of the currently authenticated user. */
-declare function getCurrentUser(): Promise<string>;
-interface GitHubScopeStatus {
-    /** Granted OAuth scopes, or null when the token exposes NONE — a fine-grained
-     *  PAT or GitHub App token carries no OAuth scope header; its permissions
-     *  aren't a scope set, so callers MUST treat null as "unknown", never a miss. */
-    granted: string[] | null;
-    /** Required scopes absent from `granted` (empty when `granted` is null). */
-    missing: string[];
-}
-/**
- * Read the authenticated token's granted OAuth scopes from the GitHub API
- * `x-oauth-scopes` response header and diff them against `required`. A classic
- * OAuth/PAT token returns a (possibly empty) comma-separated header; a
- * fine-grained PAT / GitHub App token omits it entirely → `granted: null`.
- * Reading your own user needs no special scope, so this succeeds for any VALID
- * token regardless of scopes (and throws, like the other ops, on a bad token /
- * network error — callers decide whether that is blocking).
- */
-declare function checkGitHubScopes(required?: readonly string[]): Promise<GitHubScopeStatus>;
-interface CreateRepoOptions {
-    /** Make the repo private. Default: true. */
-    private?: boolean;
-    description?: string;
-}
-/**
- * Create a new GitHub repository. Accepts either bare name (creates for the
- * authenticated user) or "owner/name" (creates in org if owner != login).
- *
- * @returns the repo HTML URL.
- */
-declare function createRepo(name: string, opts?: CreateRepoOptions): Promise<string>;
-/** Delete a GitHub repository. Requires the `delete_repo` OAuth scope. */
-declare function deleteRepo(name: string): Promise<void>;
-/** True iff the repository exists and is visible to the authenticated user. */
-declare function repoExists(name: string): Promise<boolean>;
-/**
- * Whether GitHub Actions is enabled for `ownerRepo`. `GET .../actions/permissions`
- * returns `enabled:false` both when a repo admin disabled Actions AND when an org
- * policy disables it for the repo. When Actions is off, the kit's CI workflows
- * (pr.yml / merge.yml) silently never run, which presents as "CI didn't follow
- * the kit workflow". Returns:
- *   - true / false  : the determined state
- *   - undefined     : couldn't determine (no token, repo invisible, API error) ,
- *                     callers must treat this as "unknown", never as disabled,
- *                     so a missing token never produces a false alarm.
- */
-declare function getActionsEnabled(ownerRepo: string): Promise<boolean | undefined>;
-/**
- * Resolve the canonical `owner/repo` slug. Used by create-project to poll
- * until a freshly-created repo is visible (SAML / propagation delays).
- */
-declare function getRepoFullName(name: string): Promise<string>;
-
 declare class GitHubRunnerError extends Error {
     readonly status?: number;
     constructor(message: string, status?: number);
@@ -145,4 +87,4 @@ declare function setRepoSecrets(ownerRepo: string, secrets: Record<string, strin
 /** List configured secret names (returns empty array on any error). */
 declare function listSecretNames(ownerRepo: string): Promise<string[]>;
 
-export { type CreateRepoOptions, GITHUB_SCOPES, type GitHubAuthDiagnosis, type GitHubAuthSource, GitHubRepoError, GitHubRunnerError, type GitHubScopeStatus, GitHubSecretsError, type RepoRunner, type VsCodeSessionOptions, checkGitHubScopes, createRegistrationToken, createRepo, deleteRepo, deleteRunner, diagnoseGitHubAuth, getActionsEnabled, getCurrentUser, getRepoFullName, getRunnerIdByName, getRunnerStatus, listRepoRunners, listSecretNames, repoExists, resolveGitHubToken, setRepoSecret, setRepoSecrets, tryGhAuthToken, tryVsCodeSession };
+export { GITHUB_SCOPES, type GitHubAuthDiagnosis, type GitHubAuthSource, GitHubRunnerError, GitHubSecretsError, type RepoRunner, type VsCodeSessionOptions, createRegistrationToken, deleteRunner, diagnoseGitHubAuth, getRunnerIdByName, getRunnerStatus, listRepoRunners, listSecretNames, resolveGitHubToken, setRepoSecret, setRepoSecrets, tryGhAuthToken, tryVsCodeSession };