@dependabit/github-client 0.1.1

package/CHANGELOG.md

@@ -0,0 +1,7 @@
+# @dependabit/github-client
+
+## 0.1.1
+
+### Patch Changes
+
+- Publish release setup updates and action metadata.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024-present Pradeep Mouli
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,266 @@
+# @dependabit/github-client
+
+Comprehensive GitHub API wrapper with authentication, rate limiting, and false positive tracking.
+
+## Overview
+
+This package provides a robust wrapper around the GitHub API with built-in rate limiting, multiple authentication strategies, and specialized features for dependency tracking workflows.
+
+## Features
+
+- **Rate Limiting**: Automatic rate limit handling with budget reservation
+- **Authentication**: Token, OAuth, and Basic auth support
+- **Issue Management**: Create, update, and track dependency issues
+- **Release Monitoring**: Fetch and compare releases
+- **Commit Tracking**: Retrieve commit history and changes
+- **Feedback Collection**: Monitor false positive feedback via issue labels
+- **Proactive Quota Management**: Reserve API calls before execution
+
+## Installation
+
+```bash
+pnpm add @dependabit/github-client
+```
+
+## Usage
+
+### Basic Client
+
+```typescript
+import { createGitHubClient } from '@dependabit/github-client';
+
+const client = createGitHubClient({
+  auth: process.env.GITHUB_TOKEN,
+  rateLimitWarningThreshold: 100,
+  rateLimitMinRemaining: 10
+});
+
+// Use with rate limit checking
+await client.withRateLimit(async () => {
+  // Your API calls here
+});
+```
+
+### Authentication
+
+#### Token Authentication
+```typescript
+import { TokenAuthHandler } from '@dependabit/github-client';
+
+const tokenAuth = new TokenAuthHandler('ghp_yourtoken');
+const auth = await tokenAuth.authenticate();
+// { type: 'token', token: 'ghp_yourtoken' }
+```
+
+#### OAuth Authentication
+```typescript
+import { OAuthHandler } from '@dependabit/github-client';
+
+const oauth = new OAuthHandler({
+  clientId: 'your_client_id',
+  clientSecret: 'your_secret',
+  redirectUri: 'http://localhost:3000/callback'
+});
+
+// Get authorization URL
+const authUrl = oauth.getAuthorizationUrl(['repo', 'user']);
+
+// Exchange code for token
+const auth = await oauth.authenticate(authorizationCode);
+```
+
+#### Basic Authentication
+```typescript
+import { BasicAuthHandler } from '@dependabit/github-client';
+
+const basicAuth = new BasicAuthHandler('username', 'password');
+const auth = await basicAuth.authenticate();
+```
+
+### Rate Limit Management
+
+```typescript
+import { RateLimitHandler } from '@dependabit/github-client';
+
+const rateLimit = new RateLimitHandler(token);
+
+// Check current rate limit
+const info = await rateLimit.checkRateLimit();
+console.log(`${info.remaining}/${info.limit} requests remaining`);
+
+// Reserve budget before operations
+const reservation = await rateLimit.reserveBudget(50, {
+  safetyMargin: 10,
+  maxWaitTime: 60000
+});
+
+if (!reservation.reserved) {
+  console.log(`Cannot proceed: ${reservation.reason}`);
+}
+
+// Proactive checking
+const canProceed = await rateLimit.canProceed(100, {
+  threshold: 50,
+  safetyMargin: 20
+});
+```
+
+### Issue Management
+
+```typescript
+import { IssueManager } from '@dependabit/github-client';
+
+const issues = new IssueManager(token);
+
+// Create issue for dependency update
+const issue = await issues.createIssue({
+  owner: 'user',
+  repo: 'project',
+  title: 'Update dependency X',
+  body: 'New version available',
+  severity: 'minor',
+  dependency: {
+    id: 'dep-123',
+    url: 'https://github.com/org/dep'
+  }
+});
+
+// Find existing issue
+const existing = await issues.findExistingIssue({
+  owner: 'user',
+  repo: 'project',
+  dependencyId: 'dep-123'
+});
+
+// Update issue
+await issues.updateIssue({
+  owner: 'user',
+  repo: 'project',
+  issueNumber: 42,
+  body: 'Updated information',
+  severity: 'major'
+});
+```
+
+### Release Management
+
+```typescript
+import { ReleaseManager } from '@dependabit/github-client';
+
+const releases = new ReleaseManager(token);
+
+// Get latest release
+const latest = await releases.getLatestRelease('owner', 'repo');
+
+// Get specific release
+const release = await releases.getReleaseByTag('owner', 'repo', 'v1.0.0');
+
+// Compare releases
+const comparison = await releases.compareReleases(
+  'owner',
+  'repo',
+  'v1.0.0',
+  'v2.0.0'
+);
+
+console.log(`Breaking changes: ${comparison.hasBreakingChanges}`);
+```
+
+### Commit Tracking
+
+```typescript
+import { getCommitsSince } from '@dependabit/github-client';
+
+const commits = await getCommitsSince({
+  owner: 'user',
+  repo: 'project',
+  since: new Date('2024-01-01'),
+  author: 'username'
+});
+```
+
+### False Positive Feedback
+
+```typescript
+import { FeedbackListener } from '@dependabit/github-client';
+
+const feedback = new FeedbackListener(issueManager, {
+  truePositiveLabel: 'true-positive',
+  falsePositiveLabel: 'false-positive'
+});
+
+// Collect feedback from last 30 days
+const data = await feedback.getRecentFeedback(30);
+
+console.log(`False positives: ${data.falsePositives.length}`);
+console.log(`True positives: ${data.truePositives.length}`);
+
+// Calculate rate
+const rate = await feedback.getFeedbackRate();
+console.log(`FP rate: ${(rate.falsePositiveRate * 100).toFixed(1)}%`);
+
+// Monitor specific issue
+const hasFeedback = await feedback.monitorIssue(123);
+```
+
+## API Reference
+
+### Client
+
+- `createGitHubClient(config)`: Create client instance
+- `getRateLimit()`: Get current rate limit info
+- `checkRateLimit()`: Check and warn about rate limits
+- `withRateLimit(fn)`: Execute function with rate limit checking
+
+### Authentication
+
+- `TokenAuthHandler`: GitHub PAT authentication
+- `OAuthHandler`: OAuth 2.0 flow
+- `BasicAuthHandler`: Basic HTTP authentication
+- `AuthManager`: Unified auth management
+
+### Rate Limiting
+
+- `RateLimitHandler`: Rate limit management
+- `reserveBudget(calls, options)`: Reserve API call budget
+- `canProceed(calls, options)`: Check if operation can proceed
+- `getRateLimitStatus()`: Get detailed status
+
+### Issues
+
+- `createIssue(data)`: Create new issue
+- `findExistingIssue(params)`: Find existing issue
+- `updateIssue(data)`: Update issue
+
+### Releases
+
+- `getLatestRelease(owner, repo)`: Get latest release
+- `getReleaseByTag(owner, repo, tag)`: Get specific release
+- `compareReleases(owner, repo, from, to)`: Compare two releases
+
+### Feedback
+
+- `FeedbackListener`: Monitor false positive feedback
+- `collectFeedback(options)`: Collect feedback data
+- `getFeedbackRate(options)`: Calculate FP rate
+- `getRecentFeedback(days)`: Get recent feedback
+
+## Development
+
+```bash
+# Install dependencies
+pnpm install
+
+# Build
+pnpm build
+
+# Run tests
+pnpm test
+
+# Type check
+pnpm type-check
+```
+
+## License
+
+MIT

package/dist/auth/basic.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Basic authentication handler for GitHub API
+ * Supports username/password or username/personal access token
+ */
+export interface BasicAuth {
+    type: 'basic';
+    username: string;
+    password: string;
+}
+/**
+ * Handler for HTTP Basic authentication
+ */
+export declare class BasicAuthHandler {
+    private username;
+    private password;
+    constructor(username: string, password: string);
+    /**
+     * Authenticate and return auth object
+     */
+    authenticate(): Promise<BasicAuth>;
+    /**
+     * Get base64-encoded Basic auth header value
+     */
+    getAuthHeader(): string;
+    /**
+     * Validate credentials format
+     */
+    validate(): boolean;
+    /**
+     * Get authentication type
+     */
+    getType(): string;
+    /**
+     * Update credentials (for rotation)
+     */
+    updateCredentials(username: string, password: string): void;
+    /**
+     * String representation (masks password)
+     */
+    toString(): string;
+    /**
+     * JSON representation (excludes password)
+     */
+    toJSON(): Record<string, unknown>;
+}
+//# sourceMappingURL=basic.d.ts.map

package/dist/auth/basic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.d.ts","sourceRoot":"","sources":["../../src/auth/basic.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAS;IAEzB,YAAY,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAS7C;IAED;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC,CAMvC;IAED;;OAEG;IACH,aAAa,IAAI,MAAM,CAItB;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CASlB;IAED;;OAEG;IACH,OAAO,IAAI,MAAM,CAEhB;IAED;;OAEG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAS1D;IAED;;OAEG;IACH,QAAQ,IAAI,MAAM,CAEjB;IAED;;OAEG;IACH,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMhC;CACF"}

package/dist/auth/basic.js

@@ -0,0 +1,88 @@
+/**
+ * Basic authentication handler for GitHub API
+ * Supports username/password or username/personal access token
+ */
+/**
+ * Handler for HTTP Basic authentication
+ */
+export class BasicAuthHandler {
+    username;
+    password;
+    constructor(username, password) {
+        if (!username || username.trim() === '') {
+            throw new Error('Username cannot be empty');
+        }
+        if (!password || password.trim() === '') {
+            throw new Error('Password cannot be empty');
+        }
+        this.username = username;
+        this.password = password;
+    }
+    /**
+     * Authenticate and return auth object
+     */
+    async authenticate() {
+        return {
+            type: 'basic',
+            username: this.username,
+            password: this.password
+        };
+    }
+    /**
+     * Get base64-encoded Basic auth header value
+     */
+    getAuthHeader() {
+        const credentials = `${this.username}:${this.password}`;
+        const encoded = Buffer.from(credentials).toString('base64');
+        return `Basic ${encoded}`;
+    }
+    /**
+     * Validate credentials format
+     */
+    validate() {
+        // Check for invalid characters (newlines, etc.)
+        if (this.username.includes('\n') || this.username.includes('\r')) {
+            return false;
+        }
+        if (this.password.includes('\n') || this.password.includes('\r')) {
+            return false;
+        }
+        return true;
+    }
+    /**
+     * Get authentication type
+     */
+    getType() {
+        return 'basic';
+    }
+    /**
+     * Update credentials (for rotation)
+     */
+    updateCredentials(username, password) {
+        if (!username || username.trim() === '') {
+            throw new Error('Username cannot be empty');
+        }
+        if (!password || password.trim() === '') {
+            throw new Error('Password cannot be empty');
+        }
+        this.username = username;
+        this.password = password;
+    }
+    /**
+     * String representation (masks password)
+     */
+    toString() {
+        return `BasicAuth(username=${this.username}, password=***)`;
+    }
+    /**
+     * JSON representation (excludes password)
+     */
+    toJSON() {
+        return {
+            type: 'basic',
+            username: this.username
+            // password intentionally excluded
+        };
+    }
+}
+//# sourceMappingURL=basic.js.map

package/dist/auth/basic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"basic.js","sourceRoot":"","sources":["../../src/auth/basic.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH;;GAEG;AACH,MAAM,OAAO,gBAAgB;IACnB,QAAQ,CAAS;IACjB,QAAQ,CAAS;IAEzB,YAAY,QAAgB,EAAE,QAAgB,EAAE;QAC9C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAAA,CAC1B;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,GAAuB;QACvC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;IAAA,CACH;IAED;;OAEG;IACH,aAAa,GAAW;QACtB,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC5D,OAAO,SAAS,OAAO,EAAE,CAAC;IAAA,CAC3B;IAED;;OAEG;IACH,QAAQ,GAAY;QAClB,gDAAgD;QAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IAAA,CACb;IAED;;OAEG;IACH,OAAO,GAAW;QAChB,OAAO,OAAO,CAAC;IAAA,CAChB;IAED;;OAEG;IACH,iBAAiB,CAAC,QAAgB,EAAE,QAAgB,EAAQ;QAC1D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAAA,CAC1B;IAED;;OAEG;IACH,QAAQ,GAAW;QACjB,OAAO,sBAAsB,IAAI,CAAC,QAAQ,iBAAiB,CAAC;IAAA,CAC7D;IAED;;OAEG;IACH,MAAM,GAA4B;QAChC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kCAAkC;SACnC,CAAC;IAAA,CACH;CACF"}

package/dist/auth/oauth.d.ts

@@ -0,0 +1,48 @@
+/**
+ * OAuth 2.0 authentication handler for GitHub
+ * Supports authorization code flow and token refresh
+ */
+export interface OAuthConfig {
+    clientId: string;
+    clientSecret: string;
+    redirectUri: string;
+}
+export interface OAuthAuth {
+    type: 'oauth';
+    token: string;
+    tokenType: string;
+    scope?: string | undefined;
+    expiresIn?: number | undefined;
+    refreshToken?: string | undefined;
+}
+/**
+ * Handler for OAuth 2.0 authentication
+ */
+export declare class OAuthHandler {
+    private config;
+    private readonly GITHUB_OAUTH_URL;
+    constructor(config: OAuthConfig);
+    /**
+     * Exchange authorization code for access token
+     */
+    authenticate(code: string): Promise<OAuthAuth>;
+    /**
+     * Generate authorization URL for OAuth flow
+     */
+    getAuthorizationUrl(scopes: string[], state?: string): string;
+    /**
+     * Refresh an expired access token
+     */
+    refreshToken(refreshToken: string): Promise<OAuthAuth>;
+    /**
+     * Validate OAuth configuration
+     */
+    validate(): boolean;
+    /**
+     * Get authentication type
+     */
+    getType(): string;
+    private exchangeCodeForToken;
+    private performTokenRefresh;
+}
+//# sourceMappingURL=oauth.d.ts.map

package/dist/auth/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/auth/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAUD;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoC;IAErE,YAAY,MAAM,EAAE,WAAW,EAQ9B;IAED;;OAEG;IACG,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAenD;IAED;;OAEG;IACH,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAY5D;IAED;;OAEG;IACG,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAc3D;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CAQlB;IAED;;OAEG;IACH,OAAO,IAAI,MAAM,CAEhB;YAKa,oBAAoB;YA+BpB,mBAAmB;CA2BlC"}

package/dist/auth/oauth.js

@@ -0,0 +1,139 @@
+/**
+ * OAuth 2.0 authentication handler for GitHub
+ * Supports authorization code flow and token refresh
+ */
+/**
+ * Handler for OAuth 2.0 authentication
+ */
+export class OAuthHandler {
+    config;
+    GITHUB_OAUTH_URL = 'https://github.com/login/oauth';
+    constructor(config) {
+        if (!config.clientId || config.clientId.trim() === '') {
+            throw new Error('clientId is required');
+        }
+        if (!config.clientSecret || config.clientSecret.trim() === '') {
+            throw new Error('clientSecret is required');
+        }
+        this.config = config;
+    }
+    /**
+     * Exchange authorization code for access token
+     */
+    async authenticate(code) {
+        if (!code || code.trim() === '') {
+            throw new Error('Authorization code is required');
+        }
+        const tokenResponse = await this.exchangeCodeForToken(code);
+        return {
+            type: 'oauth',
+            token: tokenResponse.access_token,
+            tokenType: tokenResponse.token_type,
+            scope: tokenResponse.scope,
+            expiresIn: tokenResponse.expires_in,
+            refreshToken: tokenResponse.refresh_token
+        };
+    }
+    /**
+     * Generate authorization URL for OAuth flow
+     */
+    getAuthorizationUrl(scopes, state) {
+        const params = new URLSearchParams({
+            client_id: this.config.clientId,
+            redirect_uri: this.config.redirectUri,
+            scope: scopes.join(' ')
+        });
+        if (state) {
+            params.append('state', state);
+        }
+        return `${this.GITHUB_OAUTH_URL}/authorize?${params.toString()}`;
+    }
+    /**
+     * Refresh an expired access token
+     */
+    async refreshToken(refreshToken) {
+        if (!refreshToken || refreshToken.trim() === '') {
+            throw new Error('Refresh token is required');
+        }
+        const tokenResponse = await this.performTokenRefresh(refreshToken);
+        return {
+            type: 'oauth',
+            token: tokenResponse.access_token,
+            tokenType: tokenResponse.token_type,
+            scope: tokenResponse.scope,
+            expiresIn: tokenResponse.expires_in
+        };
+    }
+    /**
+     * Validate OAuth configuration
+     */
+    validate() {
+        try {
+            // Validate redirect URI format
+            new URL(this.config.redirectUri);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Get authentication type
+     */
+    getType() {
+        return 'oauth';
+    }
+    /**
+     * Exchange authorization code for token (internal)
+     */
+    async exchangeCodeForToken(code) {
+        const response = await fetch(`${this.GITHUB_OAUTH_URL}/access_token`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                Accept: 'application/json'
+            },
+            body: JSON.stringify({
+                client_id: this.config.clientId,
+                client_secret: this.config.clientSecret,
+                code: code,
+                redirect_uri: this.config.redirectUri
+            })
+        });
+        if (!response.ok) {
+            throw new Error(`Failed to exchange code for token: ${response.statusText}`);
+        }
+        const data = await response.json();
+        if (data.error) {
+            throw new Error(data.error_description || data.error);
+        }
+        return data;
+    }
+    /**
+     * Perform token refresh (internal)
+     */
+    async performTokenRefresh(refreshToken) {
+        const response = await fetch(`${this.GITHUB_OAUTH_URL}/access_token`, {
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                Accept: 'application/json'
+            },
+            body: JSON.stringify({
+                client_id: this.config.clientId,
+                client_secret: this.config.clientSecret,
+                grant_type: 'refresh_token',
+                refresh_token: refreshToken
+            })
+        });
+        if (!response.ok) {
+            throw new Error(`Failed to refresh token: ${response.statusText}`);
+        }
+        const data = await response.json();
+        if (data.error) {
+            throw new Error(data.error_description || data.error);
+        }
+        return data;
+    }
+}
+//# sourceMappingURL=oauth.js.map

package/dist/auth/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/auth/oauth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAyBH;;GAEG;AACH,MAAM,OAAO,YAAY;IACf,MAAM,CAAc;IACX,gBAAgB,GAAG,gCAAgC,CAAC;IAErE,YAAY,MAAmB,EAAE;QAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IAAA,CACtB;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,IAAY,EAAsB;QACnD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAE5D,OAAO;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,aAAa,CAAC,YAAY;YACjC,SAAS,EAAE,aAAa,CAAC,UAAU;YACnC,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,SAAS,EAAE,aAAa,CAAC,UAAU;YACnC,YAAY,EAAE,aAAa,CAAC,aAAa;SAC1C,CAAC;IAAA,CACH;IAED;;OAEG;IACH,mBAAmB,CAAC,MAAgB,EAAE,KAAc,EAAU;QAC5D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACrC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACxB,CAAC,CAAC;QAEH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,GAAG,IAAI,CAAC,gBAAgB,cAAc,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;IAAA,CAClE;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,YAAoB,EAAsB;QAC3D,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QAEnE,OAAO;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,aAAa,CAAC,YAAY;YACjC,SAAS,EAAE,aAAa,CAAC,UAAU;YACnC,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,SAAS,EAAE,aAAa,CAAC,UAAU;SACpC,CAAC;IAAA,CACH;IAED;;OAEG;IACH,QAAQ,GAAY;QAClB,IAAI,CAAC;YACH,+BAA+B;YAC/B,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IAAA,CACF;IAED;;OAEG;IACH,OAAO,GAAW;QAChB,OAAO,OAAO,CAAC;IAAA,CAChB;IAED;;OAEG;IACK,KAAK,CAAC,oBAAoB,CAAC,IAAY,EAA0B;QACvE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,gBAAgB,eAAe,EAAE;YACpE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBACvC,IAAI,EAAE,IAAI;gBACV,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;aACtC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sCAAsC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAI,CAAC;IAAA,CACb;IAED;;OAEG;IACK,KAAK,CAAC,mBAAmB,CAAC,YAAoB,EAA0B;QAC9E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,gBAAgB,eAAe,EAAE;YACpE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;gBACvC,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,YAAY;aAC5B,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAI,CAAC;IAAA,CACb;CACF"}

package/dist/auth/token.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Token authentication handler for GitHub API
+ * Supports GitHub PAT tokens, fine-grained tokens, and API keys
+ */
+export interface TokenAuth {
+    type: 'token';
+    token: string;
+}
+/**
+ * Handler for token-based authentication (GitHub PAT, API keys)
+ */
+export declare class TokenAuthHandler {
+    private token;
+    private readonly GITHUB_TOKEN_PREFIXES;
+    constructor(token: string);
+    /**
+     * Authenticate and return auth object
+     */
+    authenticate(): Promise<TokenAuth>;
+    /**
+     * Validate token format
+     */
+    validate(): boolean;
+    /**
+     * Get authentication type
+     */
+    getType(): string;
+    /**
+     * Update token (for rotation)
+     */
+    updateToken(newToken: string): void;
+    /**
+     * Get current token
+     *
+     * @warning This method exposes the raw token value. Use with caution and avoid
+     * logging or displaying the token. Prefer using authenticate() for auth operations.
+     */
+    getToken(): string;
+}
+//# sourceMappingURL=token.d.ts.map

package/dist/auth/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../src/auth/token.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAOpC;IAEF,YAAY,KAAK,EAAE,MAAM,EAKxB;IAED;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC,CAKvC;IAED;;OAEG;IACH,QAAQ,IAAI,OAAO,CAQlB;IAED;;OAEG;IACH,OAAO,IAAI,MAAM,CAEhB;IAED;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAKlC;IAED;;;;;OAKG;IACH,QAAQ,IAAI,MAAM,CAEjB;CACF"}