@dxos/plugin-github 0.7.4 → 0.13.0

package/dist/lib/chunk-import-pull-request.mjs

@@ -0,0 +1,96 @@
+import { r as parsePullRequestReference } from "./chunk-github-link.mjs";
+import { l as fetchPullRequest, t as GitHubCredentials, y as responseStatus } from "./chunk-github-api.mjs";
+import { n as toPullRequestProps } from "./chunk-pull-request.mjs";
+import { i as GitHubRepoInaccessibleError, n as GitHubPullRequestReferenceError } from "./chunk-errors.mjs";
+import { n as githubToken } from "./chunk-pull-request2.mjs";
+import { GitHubOperation } from "#types";
+import * as Operation from "@dxos/compute/Operation";
+import * as Effect from "effect/Effect";
+import { PullRequest } from "@dxos/types";
+import { Database, Filter, Ref } from "@dxos/echo";
+import * as Layer from "effect/Layer";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as SpaceOperation from "@dxos/plugin-space/SpaceOperation";
+//#region src/operations/import-pull-request.ts
+/**
+* Statuses that may report the token's reach rather than the repository's absence, and so are worth
+* a second, anonymous attempt.
+*
+* 404 is the load-bearing one. GitHub answers 404 rather than 403 wherever a credential lacks access,
+* so as not to confirm what it cannot show, and a GitHub App user-to-server token — what this
+* connector holds — reaches only the repositories the App is installed on. A public repository the
+* App was never installed on therefore reads as absent. (A fine-grained PAT would not behave this
+* way: those carry read access to every public repository regardless of their selection.)
+*
+* Whatever produced it, the rule is the same: a status that a credential could have caused says
+* nothing about what an anonymous reader can see, and only the anonymous request settles it.
+*/
+var MAY_REFLECT_TOKEN_SCOPE = /* @__PURE__ */ new Set([
+	401,
+	403,
+	404
+]);
+/**
+* The pull request as the space's GitHub connection, falling back to an anonymous read whenever the
+* stored token is what stood in the way.
+*
+* A public pull request must never fail because of a credential. Three separate conditions make one
+* look unreachable — a revoked token (401), a suspended or SSO-blocked one (403), and a repository
+* outside the App installation the token belongs to (404) — and the anonymous retry, which is the
+* same request a space with no connection would make, resolves all three. The cost is one extra
+* request on a pull request that genuinely does not exist.
+*
+* `fetch` is injected so the fallback can be exercised without an HTTP client.
+*/
+var fetchPullRequestWithFallback = ({ owner, repo, number }, token, fetch = fetchPullRequest) => Effect.suspend(() => {
+	const fetchAs = (token) => fetch(owner, repo, number).pipe(Effect.provide(Layer.succeed(GitHubCredentials, { token })));
+	let tokenStatus;
+	return fetchAs(token).pipe(Effect.catchIf((error) => {
+		const status = responseStatus(error);
+		return token !== "" && status !== void 0 && MAY_REFLECT_TOKEN_SCOPE.has(status);
+	}, (error) => {
+		tokenStatus = responseStatus(error);
+		return fetchAs("");
+	}), Effect.catchIf((error) => {
+		const status = responseStatus(error);
+		return status !== void 0 && MAY_REFLECT_TOKEN_SCOPE.has(status);
+	}, (error) => Effect.die(new GitHubRepoInaccessibleError({ context: {
+		owner,
+		repo,
+		number,
+		status: responseStatus(error),
+		connected: token !== "",
+		tokenStatus
+	} }))), Effect.orDie);
+});
+/**
+* Import a pull request the user named, as the space's GitHub connection or anonymously.
+*
+* The object is filed through `SpaceOperation.AddObject` rather than added directly: an imported
+* pull request is something the user went looking for, so it belongs where they can find it again.
+*/
+var handler = GitHubOperation.ImportPullRequest.pipe(Operation.withHandler(Effect.fn(function* ({ reference }) {
+	const parsed = parsePullRequestReference(reference);
+	if (!parsed) return yield* Effect.die(new GitHubPullRequestReferenceError({ context: { reference } }));
+	const { owner, repo, number } = parsed;
+	const [existing] = yield* Database.query(Filter.type(PullRequest.PullRequest, {
+		owner,
+		repo,
+		number
+	})).run.pipe(Effect.orDie);
+	if (existing) return {
+		pullRequest: Ref.make(existing),
+		imported: false
+	};
+	const pull = yield* fetchPullRequestWithFallback(parsed, yield* githubToken());
+	const { object } = yield* Operation.invoke(SpaceOperation.AddObject, { object: PullRequest.make(toPullRequestProps(parsed, pull)) });
+	if (!PullRequest.instanceOf(object)) return yield* Effect.die(new GitHubPullRequestReferenceError({ context: { reference } }));
+	return {
+		pullRequest: Ref.make(object),
+		imported: true
+	};
+}, Effect.provide(FetchHttpClient.layer))));
+//#endregion
+export { handler as default, fetchPullRequestWithFallback };
+
+//# sourceMappingURL=chunk-import-pull-request.mjs.map

package/dist/lib/chunk-import-pull-request.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-import-pull-request.mjs","names":[],"sources":["../../src/operations/import-pull-request.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\nimport * as FetchHttpClient from 'effect/http/FetchHttpClient';\nimport * as Layer from 'effect/Layer';\n\nimport * as Operation from '@dxos/compute/Operation';\nimport { Database, Filter, Ref } from '@dxos/echo';\nimport * as SpaceOperation from '@dxos/plugin-space/SpaceOperation';\nimport { PullRequest } from '@dxos/types';\n\nimport { GitHubOperation } from '#types';\n\nimport { GitHubPullRequestReferenceError, GitHubRepoInaccessibleError } from '../errors.ts';\nimport { type PullRequestReference, parsePullRequestReference } from '../github-link.ts';\nimport { toPullRequestProps } from '../pull-request.ts';\nimport { GitHubApi } from '../services/index.ts';\nimport { githubToken } from './pull-request.ts';\n\n/**\n * Statuses that may report the token's reach rather than the repository's absence, and so are worth\n * a second, anonymous attempt.\n *\n * 404 is the load-bearing one. GitHub answers 404 rather than 403 wherever a credential lacks access,\n * so as not to confirm what it cannot show, and a GitHub App user-to-server token — what this\n * connector holds — reaches only the repositories the App is installed on. A public repository the\n * App was never installed on therefore reads as absent. (A fine-grained PAT would not behave this\n * way: those carry read access to every public repository regardless of their selection.)\n *\n * Whatever produced it, the rule is the same: a status that a credential could have caused says\n * nothing about what an anonymous reader can see, and only the anonymous request settles it.\n */\nconst MAY_REFLECT_TOKEN_SCOPE = new Set([401, 403, 404]);\n\n/**\n * The pull request as the space's GitHub connection, falling back to an anonymous read whenever the\n * stored token is what stood in the way.\n *\n * A public pull request must never fail because of a credential. Three separate conditions make one\n * look unreachable — a revoked token (401), a suspended or SSO-blocked one (403), and a repository\n * outside the App installation the token belongs to (404) — and the anonymous retry, which is the\n * same request a space with no connection would make, resolves all three. The cost is one extra\n * request on a pull request that genuinely does not exist.\n *\n * `fetch` is injected so the fallback can be exercised without an HTTP client.\n */\nexport const fetchPullRequestWithFallback = (\n  { owner, repo, number }: PullRequestReference,\n  token: string,\n  fetch: (\n    owner: string,\n    repo: string,\n    number: number,\n  ) => GitHubApi.GitHubEffect<GitHubApi.GitHubPull> = GitHubApi.fetchPullRequest,\n) =>\n  // Suspended so each run starts with its own `tokenStatus`, which the fallback sets as it runs.\n  Effect.suspend(() => {\n    const fetchAs = (token: string) =>\n      fetch(owner, repo, number).pipe(Effect.provide(Layer.succeed(GitHubApi.GitHubCredentials, { token })));\n\n    // What the authenticated attempt answered, kept so a rejected credential (401) can be told from a\n    // repository the credential simply does not reach (403/404) once the retry has also failed.\n    let tokenStatus: number | undefined;\n\n    return fetchAs(token).pipe(\n      Effect.catchIf(\n        (error) => {\n          const status = GitHubApi.responseStatus(error);\n          return token !== '' && status !== undefined && MAY_REFLECT_TOKEN_SCOPE.has(status);\n        },\n        (error) => {\n          tokenStatus = GitHubApi.responseStatus(error);\n          return fetchAs('');\n        },\n      ),\n      // Out of reach anonymously too (GitHub answers 404 for a private repository seen without\n      // credentials): a typed failure lets the dialog name the connection rather than the reference.\n      Effect.catchIf(\n        (error) => {\n          const status = GitHubApi.responseStatus(error);\n          return status !== undefined && MAY_REFLECT_TOKEN_SCOPE.has(status);\n        },\n        (error) =>\n          Effect.die(\n            new GitHubRepoInaccessibleError({\n              context: {\n                owner,\n                repo,\n                number,\n                status: GitHubApi.responseStatus(error),\n                connected: token !== '',\n                tokenStatus,\n              },\n            }),\n          ),\n      ),\n      Effect.orDie,\n    );\n  });\n\n/**\n * Import a pull request the user named, as the space's GitHub connection or anonymously.\n *\n * The object is filed through `SpaceOperation.AddObject` rather than added directly: an imported\n * pull request is something the user went looking for, so it belongs where they can find it again.\n */\nconst handler: Operation.WithHandler<typeof GitHubOperation.ImportPullRequest> = GitHubOperation.ImportPullRequest.pipe(\n  Operation.withHandler(\n    Effect.fn(function* ({ reference }) {\n      const parsed = parsePullRequestReference(reference);\n      if (!parsed) {\n        return yield* Effect.die(new GitHubPullRequestReferenceError({ context: { reference } }));\n      }\n\n      const { owner, repo, number } = parsed;\n      const [existing] = yield* Database.query(Filter.type(PullRequest.PullRequest, { owner, repo, number })).run.pipe(\n        Effect.orDie,\n      );\n      if (existing) {\n        return { pullRequest: Ref.make(existing), imported: false };\n      }\n\n      const pull = yield* fetchPullRequestWithFallback(parsed, yield* githubToken());\n\n      const { object } = yield* Operation.invoke(SpaceOperation.AddObject, {\n        object: PullRequest.make(toPullRequestProps(parsed, pull)),\n      });\n      // `AddObject` answers with what it filed, typed as any object; the narrowing is what makes the\n      // returned ref a pull request's rather than a cast.\n      if (!PullRequest.instanceOf(object)) {\n        return yield* Effect.die(new GitHubPullRequestReferenceError({ context: { reference } }));\n      }\n\n      return { pullRequest: Ref.make(object), imported: true };\n    }, Effect.provide(FetchHttpClient.layer)),\n  ),\n);\n\nexport default handler;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,IAAM,0CAA0B,IAAI,IAAI;CAAC;CAAK;CAAK;AAAG,CAAC;;;;;;;;;;;;;AAcvD,IAAa,gCACX,EAAE,OAAO,MAAM,UACf,OACA,QAIoD,qBAGpD,OAAO,cAAc;CACnB,MAAM,WAAW,UACf,MAAM,OAAO,MAAM,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ,MAAM,QAAQ,mBAA6B,EAAE,MAAM,CAAC,CAAC,CAAC;CAIvG,IAAI;CAEJ,OAAO,QAAQ,KAAK,CAAC,CAAC,KACpB,OAAO,SACJ,UAAU;EACT,MAAM,SAAS,eAAyB,KAAK;EAC7C,OAAO,UAAU,MAAM,WAAW,KAAA,KAAa,wBAAwB,IAAI,MAAM;CACnF,IACC,UAAU;EACT,cAAc,eAAyB,KAAK;EAC5C,OAAO,QAAQ,EAAE;CACnB,CACF,GAGA,OAAO,SACJ,UAAU;EACT,MAAM,SAAS,eAAyB,KAAK;EAC7C,OAAO,WAAW,KAAA,KAAa,wBAAwB,IAAI,MAAM;CACnE,IACC,UACC,OAAO,IACL,IAAI,4BAA4B,EAC9B,SAAS;EACP;EACA;EACA;EACA,QAAQ,eAAyB,KAAK;EACtC,WAAW,UAAU;EACrB;CACF,EACF,CAAC,CACH,CACJ,GACA,OAAO,KACT;AACF,CAAC;;;;;;;AAQH,IAAM,UAA2E,gBAAgB,kBAAkB,KACjH,UAAU,YACR,OAAO,GAAG,WAAW,EAAE,aAAa;CAClC,MAAM,SAAS,0BAA0B,SAAS;CAClD,IAAI,CAAC,QACH,OAAO,OAAO,OAAO,IAAI,IAAI,gCAAgC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;CAG1F,MAAM,EAAE,OAAO,MAAM,WAAW;CAChC,MAAM,CAAC,YAAY,OAAO,SAAS,MAAM,OAAO,KAAK,YAAY,aAAa;EAAE;EAAO;EAAM;CAAO,CAAC,CAAC,CAAC,CAAC,IAAI,KAC1G,OAAO,KACT;CACA,IAAI,UACF,OAAO;EAAE,aAAa,IAAI,KAAK,QAAQ;EAAG,UAAU;CAAM;CAG5D,MAAM,OAAO,OAAO,6BAA6B,QAAQ,OAAO,YAAY,CAAC;CAE7E,MAAM,EAAE,WAAW,OAAO,UAAU,OAAO,eAAe,WAAW,EACnE,QAAQ,YAAY,KAAK,mBAAmB,QAAQ,IAAI,CAAC,EAC3D,CAAC;CAGD,IAAI,CAAC,YAAY,WAAW,MAAM,GAChC,OAAO,OAAO,OAAO,IAAI,IAAI,gCAAgC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;CAG1F,OAAO;EAAE,aAAa,IAAI,KAAK,MAAM;EAAG,UAAU;CAAK;AACzD,GAAG,OAAO,QAAQ,gBAAgB,KAAK,CAAC,CAC1C,CACF"}

package/dist/lib/chunk-link-resolver.mjs

@@ -0,0 +1,109 @@
+import { n as parseGitHubLink } from "./chunk-github-link.mjs";
+import { githubLinkIcon } from "./extensions.mjs";
+import "./chunk-constants.mjs";
+import { d as fetchRepo, l as fetchPullRequest, o as fetchIssue, t as GitHubCredentials } from "./chunk-github-api.mjs";
+import { n as toPullRequestProps } from "./chunk-pull-request.mjs";
+import * as Capability from "@dxos/app-framework/Capability";
+import * as PreviewCapabilities from "@dxos/plugin-preview/PreviewCapabilities";
+import { GitHubCapabilities } from "#types";
+import * as Effect from "effect/Effect";
+import { Issue, PullRequest, Repo } from "@dxos/types";
+import { Database, Filter } from "@dxos/echo";
+import * as Layer from "effect/Layer";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import { Connection } from "@dxos/link";
+import { log } from "@dxos/log";
+//#region src/capabilities/link-resolver.ts
+var __dxlog_file = "/__w/dxos/dxos/packages/plugins/plugin-github/src/capabilities/link-resolver.ts";
+/**
+* Resolves a GitHub repository, pull-request or issue URL to an in-memory `Repo`, `PullRequest` or
+* `Issue` for the preview popover. The object comes from the contributed `LinkSource` when a host provides one and
+* from the GitHub API otherwise; either way it is built, not stored — a preview is not a sync.
+*/
+var link_resolver_default = Capability.makeModule(Effect.fnUntraced(function* () {
+	const capabilities = yield* Capability.Service;
+	return Capability.contribute(PreviewCapabilities.LinkResolver, [{
+		match: (url) => parseGitHubLink(url) !== void 0,
+		label: (url) => {
+			const link = parseGitHubLink(url);
+			return link && (link.number !== void 0 ? `#${link.number}` : `${link.owner}/${link.repo}`);
+		},
+		icon: githubLinkIcon,
+		resolve: ({ eid }, context) => Effect.gen(function* () {
+			const link = parseGitHubLink(eid);
+			if (!link) return;
+			const [source = fetchFromGitHub] = capabilities.getAll(GitHubCapabilities.LinkSource);
+			const object = yield* source(link, context);
+			return object && {
+				label: Repo.instanceOf(object) ? Repo.fullName(object) : Issue.reference(object),
+				object
+			};
+		})
+	}]);
+}));
+/**
+* The default source: each of the space's GitHub connection tokens in turn — a space can hold
+* several, and only some may reach a private repository — then anonymous, which reaches a public one.
+*/
+var fetchFromGitHub = (link, { db }) => Effect.gen(function* () {
+	const tokens = db ? yield* connectionTokens(db) : [];
+	for (const token of [...tokens, ""]) {
+		const object = yield* fetchLink(link).pipe(Effect.provide(Layer.succeed(GitHubCredentials, { token })), Effect.tapError((error) => Effect.sync(() => log.warn("github link preview failed", {
+			url: link.url,
+			error
+		}, {
+			"~LogMeta": "~LogMeta",
+			F: __dxlog_file,
+			L: 67,
+			S: this
+		}))), Effect.catch(() => Effect.succeed(void 0)));
+		if (object) return object;
+	}
+}).pipe(Effect.provide(FetchHttpClient.layer), Effect.catch(() => Effect.succeed(void 0)));
+/** The tokens of the space's GitHub connections, in query order. */
+var connectionTokens = (db) => Effect.gen(function* () {
+	const connections = yield* Database.query(Filter.type(Connection.Connection)).run;
+	const tokens = [];
+	for (const connection of connections) {
+		if (connection.connectorId !== "github") continue;
+		const accessToken = yield* Database.load(connection.accessToken);
+		tokens.push(accessToken.token);
+	}
+	return tokens;
+}).pipe(Effect.provide(Database.layer(db)));
+var fetchLink = (link) => Effect.gen(function* () {
+	const { owner, repo, number } = link;
+	if (link.kind === "repo" || number === void 0) return toRepo(link, yield* fetchRepo(owner, repo));
+	if (link.kind === "pull") return toPullRequest(link, yield* fetchPullRequest(owner, repo, number));
+	const issue = yield* fetchIssue(owner, repo, number);
+	if (issue.pull_request) return toPullRequest(link, yield* fetchPullRequest(owner, repo, number));
+	return toIssue(link, issue);
+});
+var toRepo = ({ owner, url }, repo) => Repo.make({
+	owner,
+	name: repo.name,
+	url: repo.html_url ?? url,
+	description: repo.description ?? void 0,
+	defaultBranch: repo.default_branch ?? void 0
+});
+var toIssue = ({ owner, repo, number = 0, url }, issue) => Issue.make({
+	owner,
+	repo,
+	number,
+	title: issue.title,
+	url: issue.html_url ?? url,
+	state: issue.state === "closed" ? "closed" : "open",
+	author: issue.user?.login,
+	description: issue.body ?? void 0,
+	labels: issue.labels?.map((label) => label.name)
+});
+var toPullRequest = ({ owner, repo, number = 0, url }, pull) => PullRequest.make(toPullRequestProps({
+	owner,
+	repo,
+	number,
+	url
+}, pull));
+//#endregion
+export { link_resolver_default as default };
+
+//# sourceMappingURL=chunk-link-resolver.mjs.map

package/dist/lib/chunk-link-resolver.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-link-resolver.mjs","names":[],"sources":["../../src/capabilities/link-resolver.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\nimport * as FetchHttpClient from 'effect/http/FetchHttpClient';\nimport * as Layer from 'effect/Layer';\n\nimport * as Capability from '@dxos/app-framework/Capability';\nimport { Database, Filter } from '@dxos/echo';\nimport { Connection } from '@dxos/link';\nimport { log } from '@dxos/log';\nimport * as PreviewCapabilities from '@dxos/plugin-preview/PreviewCapabilities';\nimport { Issue, PullRequest, Repo } from '@dxos/types';\n\nimport { GitHubCapabilities } from '#types';\n\nimport { GITHUB_PROVIDER_ID } from '../constants.ts';\nimport { type GitHubLink, githubLinkIcon, parseGitHubLink } from '../extensions/index.ts';\nimport { toPullRequestProps } from '../pull-request.ts';\nimport { GitHubApi } from '../services/index.ts';\n\n/**\n * Resolves a GitHub repository, pull-request or issue URL to an in-memory `Repo`, `PullRequest` or\n * `Issue` for the preview popover. The object comes from the contributed `LinkSource` when a host provides one and\n * from the GitHub API otherwise; either way it is built, not stored — a preview is not a sync.\n */\nexport default Capability.makeModule(\n  Effect.fnUntraced(function* () {\n    const capabilities = yield* Capability.Service;\n    return Capability.contribute(PreviewCapabilities.LinkResolver, [\n      {\n        match: (url) => parseGitHubLink(url) !== undefined,\n        // How GitHub itself shortens a bare reference: the number, or the repository's full name.\n        label: (url) => {\n          const link = parseGitHubLink(url);\n          return link && (link.number !== undefined ? `#${link.number}` : `${link.owner}/${link.repo}`);\n        },\n        icon: githubLinkIcon,\n        resolve: ({ eid }, context) =>\n          Effect.gen(function* () {\n            const link = parseGitHubLink(eid);\n            if (!link) {\n              return undefined;\n            }\n            const [source = fetchFromGitHub] = capabilities.getAll(GitHubCapabilities.LinkSource);\n            const object = yield* source(link, context);\n            return (\n              object && { label: Repo.instanceOf(object) ? Repo.fullName(object) : Issue.reference(object), object }\n            );\n          }),\n      },\n    ]);\n  }),\n);\n\n/**\n * The default source: each of the space's GitHub connection tokens in turn — a space can hold\n * several, and only some may reach a private repository — then anonymous, which reaches a public one.\n */\nconst fetchFromGitHub: GitHubCapabilities.GitHubLinkSource = (link, { db }) =>\n  Effect.gen(function* () {\n    const tokens = db ? yield* connectionTokens(db) : [];\n    for (const token of [...tokens, '']) {\n      const object = yield* fetchLink(link).pipe(\n        Effect.provide(Layer.succeed(GitHubApi.GitHubCredentials, { token })),\n        Effect.tapError((error) => Effect.sync(() => log.warn('github link preview failed', { url: link.url, error }))),\n        Effect.catch(() => Effect.succeed(undefined)),\n      );\n      if (object) {\n        return object;\n      }\n    }\n    return undefined;\n  }).pipe(\n    Effect.provide(FetchHttpClient.layer),\n    Effect.catch(() => Effect.succeed(undefined)),\n  );\n\n/** The tokens of the space's GitHub connections, in query order. */\nconst connectionTokens = (db: NonNullable<PreviewCapabilities.PreviewLinkContext['db']>) =>\n  Effect.gen(function* () {\n    const connections = yield* Database.query(Filter.type(Connection.Connection)).run;\n    const tokens: string[] = [];\n    for (const connection of connections) {\n      if (connection.connectorId !== GITHUB_PROVIDER_ID) {\n        continue;\n      }\n      const accessToken = yield* Database.load(connection.accessToken);\n      tokens.push(accessToken.token);\n    }\n    return tokens;\n  }).pipe(Effect.provide(Database.layer(db)));\n\nconst fetchLink = (link: GitHubLink) =>\n  Effect.gen(function* () {\n    const { owner, repo, number } = link;\n    if (link.kind === 'repo' || number === undefined) {\n      return toRepo(link, yield* GitHubApi.fetchRepo(owner, repo));\n    }\n    if (link.kind === 'pull') {\n      return toPullRequest(link, yield* GitHubApi.fetchPullRequest(owner, repo, number));\n    }\n    const issue = yield* GitHubApi.fetchIssue(owner, repo, number);\n    // The issue endpoint answers for a pull request's number too; only the pull endpoint has its diff.\n    if (issue.pull_request) {\n      return toPullRequest(link, yield* GitHubApi.fetchPullRequest(owner, repo, number));\n    }\n    return toIssue(link, issue);\n  });\n\nconst toRepo = ({ owner, url }: GitHubLink, repo: GitHubApi.GitHubRepo): Repo.Repo =>\n  Repo.make({\n    owner,\n    name: repo.name,\n    url: repo.html_url ?? url,\n    description: repo.description ?? undefined,\n    defaultBranch: repo.default_branch ?? undefined,\n  });\n\nconst toIssue = ({ owner, repo, number = 0, url }: GitHubLink, issue: GitHubApi.GitHubIssue): Issue.Issue =>\n  Issue.make({\n    owner,\n    repo,\n    number,\n    title: issue.title,\n    url: issue.html_url ?? url,\n    state: issue.state === 'closed' ? 'closed' : 'open',\n    author: issue.user?.login,\n    description: issue.body ?? undefined,\n    labels: issue.labels?.map((label) => label.name),\n  });\n\nconst toPullRequest = (\n  { owner, repo, number = 0, url }: GitHubLink,\n  pull: GitHubApi.GitHubPull,\n): PullRequest.PullRequest => PullRequest.make(toPullRequestProps({ owner, repo, number, url }, pull));\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA2BA,IAAA,wBAAe,WAAW,WACxB,OAAO,WAAW,aAAa;CAC7B,MAAM,eAAe,OAAO,WAAW;CACvC,OAAO,WAAW,WAAW,oBAAoB,cAAc,CAC7D;EACE,QAAQ,QAAQ,gBAAgB,GAAG,MAAM,KAAA;EAEzC,QAAQ,QAAQ;GACd,MAAM,OAAO,gBAAgB,GAAG;GAChC,OAAO,SAAS,KAAK,WAAW,KAAA,IAAY,IAAI,KAAK,WAAW,GAAG,KAAK,MAAM,GAAG,KAAK;EACxF;EACA,MAAM;EACN,UAAU,EAAE,OAAO,YACjB,OAAO,IAAI,aAAa;GACtB,MAAM,OAAO,gBAAgB,GAAG;GAChC,IAAI,CAAC,MACH;GAEF,MAAM,CAAC,SAAS,mBAAmB,aAAa,OAAO,mBAAmB,UAAU;GACpF,MAAM,SAAS,OAAO,OAAO,MAAM,OAAO;GAC1C,OACE,UAAU;IAAE,OAAO,KAAK,WAAW,MAAM,IAAI,KAAK,SAAS,MAAM,IAAI,MAAM,UAAU,MAAM;IAAG;GAAO;EAEzG,CAAC;CACL,CACF,CAAC;AACH,CAAC,CACH;;;;;AAMA,IAAM,mBAAwD,MAAM,EAAE,SACpE,OAAO,IAAI,aAAa;CACtB,MAAM,SAAS,KAAK,OAAO,iBAAiB,EAAE,IAAI,CAAC;CACnD,KAAK,MAAM,SAAS,CAAC,GAAG,QAAQ,EAAE,GAAG;EACnC,MAAM,SAAS,OAAO,UAAU,IAAI,CAAC,CAAC,KACpC,OAAO,QAAQ,MAAM,QAAQ,mBAA6B,EAAE,MAAM,CAAC,CAAC,GACpE,OAAO,UAAU,UAAU,OAAO,WAAW,IAAI,KAAK,8BAA8B;GAAE,KAAK,KAAK;GAAK;EAAM,GAAA;GAAA,YAAA;GAAA,GAAA;GAAA,GAAA;GAAA,GAAA;EAAA,CAAC,CAAC,CAAC,GAC9G,OAAO,YAAY,OAAO,QAAQ,KAAA,CAAS,CAAC,CAC9C;EACA,IAAI,QACF,OAAO;CAEX;AAEF,CAAC,CAAC,CAAC,KACD,OAAO,QAAQ,gBAAgB,KAAK,GACpC,OAAO,YAAY,OAAO,QAAQ,KAAA,CAAS,CAAC,CAC9C;;AAGF,IAAM,oBAAoB,OACxB,OAAO,IAAI,aAAa;CACtB,MAAM,cAAc,OAAO,SAAS,MAAM,OAAO,KAAK,WAAW,UAAU,CAAC,CAAC,CAAC;CAC9E,MAAM,SAAmB,CAAC;CAC1B,KAAK,MAAM,cAAc,aAAa;EACpC,IAAI,WAAW,gBAAA,UACb;EAEF,MAAM,cAAc,OAAO,SAAS,KAAK,WAAW,WAAW;EAC/D,OAAO,KAAK,YAAY,KAAK;CAC/B;CACA,OAAO;AACT,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAC;AAE5C,IAAM,aAAa,SACjB,OAAO,IAAI,aAAa;CACtB,MAAM,EAAE,OAAO,MAAM,WAAW;CAChC,IAAI,KAAK,SAAS,UAAU,WAAW,KAAA,GACrC,OAAO,OAAO,MAAM,OAAO,UAAoB,OAAO,IAAI,CAAC;CAE7D,IAAI,KAAK,SAAS,QAChB,OAAO,cAAc,MAAM,OAAO,iBAA2B,OAAO,MAAM,MAAM,CAAC;CAEnF,MAAM,QAAQ,OAAO,WAAqB,OAAO,MAAM,MAAM;CAE7D,IAAI,MAAM,cACR,OAAO,cAAc,MAAM,OAAO,iBAA2B,OAAO,MAAM,MAAM,CAAC;CAEnF,OAAO,QAAQ,MAAM,KAAK;AAC5B,CAAC;AAEH,IAAM,UAAU,EAAE,OAAO,OAAmB,SAC1C,KAAK,KAAK;CACR;CACA,MAAM,KAAK;CACX,KAAK,KAAK,YAAY;CACtB,aAAa,KAAK,eAAe,KAAA;CACjC,eAAe,KAAK,kBAAkB,KAAA;AACxC,CAAC;AAEH,IAAM,WAAW,EAAE,OAAO,MAAM,SAAS,GAAG,OAAmB,UAC7D,MAAM,KAAK;CACT;CACA;CACA;CACA,OAAO,MAAM;CACb,KAAK,MAAM,YAAY;CACvB,OAAO,MAAM,UAAU,WAAW,WAAW;CAC7C,QAAQ,MAAM,MAAM;CACpB,aAAa,MAAM,QAAQ,KAAA;CAC3B,QAAQ,MAAM,QAAQ,KAAK,UAAU,MAAM,IAAI;AACjD,CAAC;AAEH,IAAM,iBACJ,EAAE,OAAO,MAAM,SAAS,GAAG,OAC3B,SAC4B,YAAY,KAAK,mBAAmB;CAAE;CAAO;CAAM;CAAQ;AAAI,GAAG,IAAI,CAAC"}

package/dist/lib/chunk-markdown-extension.mjs

@@ -0,0 +1,92 @@
+import { githubLinks, githubReferences, referenceUrl } from "./extensions.mjs";
+import { r as GITHUB_SOURCE } from "./chunk-constants.mjs";
+import * as Capability from "@dxos/app-framework/Capability";
+import * as MarkdownCapabilities from "@dxos/plugin-markdown/MarkdownCapabilities";
+import { ViewPlugin } from "@codemirror/view";
+import * as Effect from "effect/Effect";
+import { Repo, TaskSet } from "@dxos/types";
+import { Filter, Obj, Query } from "@dxos/echo";
+import * as Project from "@dxos/compute/Project";
+//#region src/capabilities/markdown-extension.ts
+/** `owner/repo` — what `sync` writes as the name of the TaskSet mirroring a repository. */
+var REPO_NAME = /^[\w.-]+\/[\w.-]+$/;
+/**
+* `#123` in a document resolves against the repository the document's project names: this plugin
+* owns that knowledge, so the decoration is contributed rather than built into the editor. A full
+* pull-request or issue URL needs no repository and becomes a chip whose popover this plugin's
+* link resolver answers.
+*
+* Ambiguity is answered by declining. A space with several repositories and no project naming one
+* has no single meaning for a bare number, so the reference is left as text rather than guessed at.
+*/
+var markdown_extension_default = Capability.makeModule(Effect.fnUntraced(function* () {
+	return Capability.contribute(MarkdownCapabilities.ExtensionProvider, [({ document: doc, subject, viewMode }) => {
+		if (viewMode === "source") return;
+		const object = doc ?? subject;
+		const db = object && Obj.getDatabase(object);
+		if (!object || !db) return [githubLinks()];
+		const mirrored = watchMirroredRepos(db);
+		return [
+			githubLinks(),
+			githubReferences({ resolve: (number) => {
+				const repo = projectRepo(db, object) ?? mirrored.single();
+				return repo ? referenceUrl(repo, number) : void 0;
+			} }),
+			ViewPlugin.define(() => ({ destroy: mirrored.acquire() }))
+		];
+	}]);
+}));
+/** The `repo` of the project owning `object`, else the repository its adopted task set mirrors. */
+var projectRepo = (db, object) => {
+	const project = owningProject(object);
+	if (!project) return;
+	const repo = project.repo?.target;
+	if (repo && Repo.instanceOf(repo)) return Repo.fullName(repo);
+	const taskSet = project.taskSet?.target;
+	return taskSet && isMirrored(taskSet) ? repoName(taskSet) : void 0;
+};
+/** Walks the ECHO parent edge: a project's outline, instructions and artifacts all cascade from it. */
+var owningProject = (object) => {
+	let current = object;
+	for (let depth = 0; current && depth < 8; depth++) {
+		if (Obj.instanceOf(Project.Project, current)) return current;
+		current = Obj.getParent(current);
+	}
+};
+/**
+* The repositories this space mirrors, as `owner/name`. Read synchronously from a decoration pass,
+* where a fresh `runSync()` would answer with whatever the tab has loaded so far; the subscription
+* brings the set to the complete answer and keeps it there while any editor holds it.
+*/
+var watchMirroredRepos = (db) => {
+	const names = /* @__PURE__ */ new Set();
+	let holds = 0;
+	let stop;
+	return {
+		/** The one mirrored repository, or undefined when there is none or more than one. */
+		single: () => names.size === 1 ? [...names][0] : void 0,
+		/** Starts watching on the first hold; the returned release is safe to call more than once. */
+		acquire: () => {
+			if (holds++ === 0) stop = db.query(Query.select(Filter.type(TaskSet.TaskSet))).subscribe((result) => {
+				names.clear();
+				for (const name of result.results.filter(isMirrored).map(repoName)) if (name) names.add(name);
+			}, { fire: true });
+			let released = false;
+			return () => {
+				if (released) return;
+				released = true;
+				if (--holds === 0) {
+					stop?.();
+					stop = void 0;
+					names.clear();
+				}
+			};
+		}
+	};
+};
+var isMirrored = (taskSet) => Obj.getMeta(taskSet).keys.some(({ source }) => source === GITHUB_SOURCE);
+var repoName = (taskSet) => taskSet.name && REPO_NAME.test(taskSet.name) ? taskSet.name : void 0;
+//#endregion
+export { markdown_extension_default as default };
+
+//# sourceMappingURL=chunk-markdown-extension.mjs.map

package/dist/lib/chunk-markdown-extension.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-markdown-extension.mjs","names":[],"sources":["../../src/capabilities/markdown-extension.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\nimport { ViewPlugin } from '@codemirror/view';\nimport * as Effect from 'effect/Effect';\n\nimport * as Capability from '@dxos/app-framework/Capability';\nimport * as Project from '@dxos/compute/Project';\nimport { type Database, Filter, Obj, Query } from '@dxos/echo';\nimport * as MarkdownCapabilities from '@dxos/plugin-markdown/MarkdownCapabilities';\nimport { Repo, TaskSet } from '@dxos/types';\n\nimport { GITHUB_SOURCE } from '../constants.ts';\nimport { githubLinks, githubReferences, referenceUrl } from '../extensions/index.ts';\n\n/** `owner/repo` — what `sync` writes as the name of the TaskSet mirroring a repository. */\nconst REPO_NAME = /^[\\w.-]+\\/[\\w.-]+$/;\n\n/**\n * `#123` in a document resolves against the repository the document's project names: this plugin\n * owns that knowledge, so the decoration is contributed rather than built into the editor. A full\n * pull-request or issue URL needs no repository and becomes a chip whose popover this plugin's\n * link resolver answers.\n *\n * Ambiguity is answered by declining. A space with several repositories and no project naming one\n * has no single meaning for a bare number, so the reference is left as text rather than guessed at.\n */\nexport default Capability.makeModule(\n  Effect.fnUntraced(function* () {\n    return Capability.contribute(MarkdownCapabilities.ExtensionProvider, [\n      ({ document: doc, subject, viewMode }) => {\n        // Source view shows the document's own text; a decoration there would hide what it is.\n        if (viewMode === 'source') {\n          return undefined;\n        }\n\n        // A full URL needs no object: a task's description or an outline gets the chip too. A bare\n        // `#123` resolves against the repository of the project owning the edited object, so it\n        // needs one — the document, or whatever else the editor edits.\n        const object = doc ?? subject;\n        const db = object && Obj.getDatabase(object);\n        if (!object || !db) {\n          return [githubLinks()];\n        }\n\n        // Nearest binding first: the project that owns the object names its repository explicitly,\n        // and only a space with exactly one mirrored repository can answer for an object that\n        // belongs to no project.\n        const mirrored = watchMirroredRepos(db);\n        return [\n          githubLinks(),\n          githubReferences({\n            resolve: (number) => {\n              const repo = projectRepo(db, object) ?? mirrored.single();\n              return repo ? referenceUrl(repo, number) : undefined;\n            },\n          }),\n          // Held per mounted view: the provider's result can be mounted in several editors or none,\n          // so each view acquires its own hold rather than all of them releasing one subscription.\n          ViewPlugin.define(() => ({ destroy: mirrored.acquire() })),\n        ];\n      },\n    ]);\n  }),\n);\n\n/** The `repo` of the project owning `object`, else the repository its adopted task set mirrors. */\nconst projectRepo = (db: Database.Database, object: Obj.Unknown): string | undefined => {\n  const project = owningProject(object);\n  if (!project) {\n    return undefined;\n  }\n\n  const repo = project.repo?.target;\n  if (repo && Repo.instanceOf(repo)) {\n    return Repo.fullName(repo);\n  }\n\n  // A project mirroring a repository adopts its synced task set, whose name is `owner/repo`.\n  const taskSet = project.taskSet?.target;\n  return taskSet && isMirrored(taskSet) ? repoName(taskSet) : undefined;\n};\n\n/** Walks the ECHO parent edge: a project's outline, instructions and artifacts all cascade from it. */\nconst owningProject = (object: Obj.Unknown): Project.Project | undefined => {\n  let current: Obj.Unknown | undefined = object;\n  // Bounded: a malformed parent cycle must not hang the editor's decoration pass.\n  for (let depth = 0; current && depth < 8; depth++) {\n    if (Obj.instanceOf(Project.Project, current)) {\n      return current;\n    }\n    current = Obj.getParent(current);\n  }\n  return undefined;\n};\n\n/**\n * The repositories this space mirrors, as `owner/name`. Read synchronously from a decoration pass,\n * where a fresh `runSync()` would answer with whatever the tab has loaded so far; the subscription\n * brings the set to the complete answer and keeps it there while any editor holds it.\n */\nconst watchMirroredRepos = (db: Database.Database) => {\n  const names = new Set<string>();\n  let holds = 0;\n  let stop: (() => void) | undefined;\n  return {\n    /** The one mirrored repository, or undefined when there is none or more than one. */\n    single: () => (names.size === 1 ? [...names][0] : undefined),\n    /** Starts watching on the first hold; the returned release is safe to call more than once. */\n    acquire: (): (() => void) => {\n      if (holds++ === 0) {\n        stop = db.query(Query.select(Filter.type(TaskSet.TaskSet))).subscribe(\n          (result) => {\n            names.clear();\n            for (const name of result.results.filter(isMirrored).map(repoName)) {\n              if (name) {\n                names.add(name);\n              }\n            }\n          },\n          { fire: true },\n        );\n      }\n\n      let released = false;\n      return () => {\n        if (released) {\n          return;\n        }\n        released = true;\n        if (--holds === 0) {\n          stop?.();\n          stop = undefined;\n          names.clear();\n        }\n      };\n    },\n  };\n};\n\nconst isMirrored = (taskSet: TaskSet.TaskSet): boolean =>\n  Obj.getMeta(taskSet).keys.some(({ source }) => source === GITHUB_SOURCE);\n\nconst repoName = (taskSet: TaskSet.TaskSet): string | undefined =>\n  taskSet.name && REPO_NAME.test(taskSet.name) ? taskSet.name : undefined;\n"],"mappings":";;;;;;;;;;;AAiBA,IAAM,YAAY;;;;;;;;;;AAWlB,IAAA,6BAAe,WAAW,WACxB,OAAO,WAAW,aAAa;CAC7B,OAAO,WAAW,WAAW,qBAAqB,mBAAmB,EAClE,EAAE,UAAU,KAAK,SAAS,eAAe;EAExC,IAAI,aAAa,UACf;EAMF,MAAM,SAAS,OAAO;EACtB,MAAM,KAAK,UAAU,IAAI,YAAY,MAAM;EAC3C,IAAI,CAAC,UAAU,CAAC,IACd,OAAO,CAAC,YAAY,CAAC;EAMvB,MAAM,WAAW,mBAAmB,EAAE;EACtC,OAAO;GACL,YAAY;GACZ,iBAAiB,EACf,UAAU,WAAW;IACnB,MAAM,OAAO,YAAY,IAAI,MAAM,KAAK,SAAS,OAAO;IACxD,OAAO,OAAO,aAAa,MAAM,MAAM,IAAI,KAAA;GAC7C,EACF,CAAC;GAGD,WAAW,cAAc,EAAE,SAAS,SAAS,QAAQ,EAAE,EAAE;EAC3D;CACF,CACF,CAAC;AACH,CAAC,CACH;;AAGA,IAAM,eAAe,IAAuB,WAA4C;CACtF,MAAM,UAAU,cAAc,MAAM;CACpC,IAAI,CAAC,SACH;CAGF,MAAM,OAAO,QAAQ,MAAM;CAC3B,IAAI,QAAQ,KAAK,WAAW,IAAI,GAC9B,OAAO,KAAK,SAAS,IAAI;CAI3B,MAAM,UAAU,QAAQ,SAAS;CACjC,OAAO,WAAW,WAAW,OAAO,IAAI,SAAS,OAAO,IAAI,KAAA;AAC9D;;AAGA,IAAM,iBAAiB,WAAqD;CAC1E,IAAI,UAAmC;CAEvC,KAAK,IAAI,QAAQ,GAAG,WAAW,QAAQ,GAAG,SAAS;EACjD,IAAI,IAAI,WAAW,QAAQ,SAAS,OAAO,GACzC,OAAO;EAET,UAAU,IAAI,UAAU,OAAO;CACjC;AAEF;;;;;;AAOA,IAAM,sBAAsB,OAA0B;CACpD,MAAM,wBAAQ,IAAI,IAAY;CAC9B,IAAI,QAAQ;CACZ,IAAI;CACJ,OAAO;;EAEL,cAAe,MAAM,SAAS,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,KAAK,KAAA;;EAElD,eAA6B;GAC3B,IAAI,YAAY,GACd,OAAO,GAAG,MAAM,MAAM,OAAO,OAAO,KAAK,QAAQ,OAAO,CAAC,CAAC,CAAC,CAAC,WACzD,WAAW;IACV,MAAM,MAAM;IACZ,KAAK,MAAM,QAAQ,OAAO,QAAQ,OAAO,UAAU,CAAC,CAAC,IAAI,QAAQ,GAC/D,IAAI,MACF,MAAM,IAAI,IAAI;GAGpB,GACA,EAAE,MAAM,KAAK,CACf;GAGF,IAAI,WAAW;GACf,aAAa;IACX,IAAI,UACF;IAEF,WAAW;IACX,IAAI,EAAE,UAAU,GAAG;KACjB,OAAO;KACP,OAAO,KAAA;KACP,MAAM,MAAM;IACd;GACF;EACF;CACF;AACF;AAEA,IAAM,cAAc,YAClB,IAAI,QAAQ,OAAO,CAAC,CAAC,KAAK,MAAM,EAAE,aAAa,WAAW,aAAa;AAEzE,IAAM,YAAY,YAChB,QAAQ,QAAQ,UAAU,KAAK,QAAQ,IAAI,IAAI,QAAQ,OAAO,KAAA"}

package/dist/lib/chunk-materialize-target.mjs

@@ -0,0 +1,36 @@
+import { r as GITHUB_SOURCE } from "./chunk-constants.mjs";
+import { GitHubOperation } from "#types";
+import * as Operation from "@dxos/compute/Operation";
+import * as Effect from "effect/Effect";
+import { TaskSet } from "@dxos/types";
+import { Database, Filter, Obj, Query, Ref } from "@dxos/echo";
+//#region src/operations/materialize-target.ts
+var fkFor = (id) => ({
+	source: GITHUB_SOURCE,
+	id
+});
+/**
+* Find-or-create the empty local root Project for a GitHub repo so a `Cursor`
+* can reference it as its `spec.target`. Idempotent: keyed by the repo's
+* GitHub foreign id (`remoteTarget.id`), it returns the existing Project
+* when one already carries that key. The repo's data is filled in lazily by the
+* sync operation; here we only stamp the foreign key + a display name.
+*/
+var handler = GitHubOperation.MaterializeGitHubTarget.pipe(Operation.withHandler(Effect.fnUntraced(function* ({ connection, remoteTarget }) {
+	if (!remoteTarget) return yield* Effect.die(/* @__PURE__ */ new Error("GitHub materializeTarget requires a remoteTarget (repo descriptor)."));
+	const db = connection.target ? Obj.getDatabase(connection.target) : void 0;
+	if (!db) return yield* Effect.die(/* @__PURE__ */ new Error("No database for connection ref."));
+	return yield* Effect.gen(function* () {
+		const existing = yield* Database.query(Query.select(Filter.foreignKeys(TaskSet.TaskSet, [fkFor(remoteTarget.id)]))).run;
+		if (existing.length > 0) return { target: Ref.make(existing[0]) };
+		const created = yield* Database.add(TaskSet.make({
+			[Obj.Meta]: { keys: [fkFor(remoteTarget.id)] },
+			name: remoteTarget.name
+		}));
+		return { target: Ref.make(created) };
+	}).pipe(Effect.provide(Database.layer(db)));
+})));
+//#endregion
+export { handler as default };
+
+//# sourceMappingURL=chunk-materialize-target.mjs.map

package/dist/lib/chunk-materialize-target.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-materialize-target.mjs","names":[],"sources":["../../src/operations/materialize-target.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport * as Operation from '@dxos/compute/Operation';\nimport { Database, Filter, Obj, Query, Ref } from '@dxos/echo';\nimport { TaskSet } from '@dxos/types';\n\nimport { GitHubOperation } from '#types';\n\nimport { GITHUB_SOURCE } from '../constants.ts';\n\nconst fkFor = (id: string) => ({ source: GITHUB_SOURCE, id });\n\n/**\n * Find-or-create the empty local root Project for a GitHub repo so a `Cursor`\n * can reference it as its `spec.target`. Idempotent: keyed by the repo's\n * GitHub foreign id (`remoteTarget.id`), it returns the existing Project\n * when one already carries that key. The repo's data is filled in lazily by the\n * sync operation; here we only stamp the foreign key + a display name.\n */\nconst handler: Operation.WithHandler<typeof GitHubOperation.MaterializeGitHubTarget> =\n  GitHubOperation.MaterializeGitHubTarget.pipe(\n    Operation.withHandler(\n      Effect.fnUntraced(function* ({ connection, remoteTarget }) {\n        if (!remoteTarget) {\n          return yield* Effect.die(new Error('GitHub materializeTarget requires a remoteTarget (repo descriptor).'));\n        }\n        // TODO(wittjosiah): the operation should just depend on `Database.Service` and\n        //   have it provided by the OperationInvoker — composer's invoker is wired\n        //   without a `databaseResolver`, so we derive the db from the connection ref's\n        //   target and provide `Database.layer(db)` ourselves.\n        const db = connection.target ? Obj.getDatabase(connection.target) : undefined;\n        if (!db) {\n          return yield* Effect.die(new Error('No database for connection ref.'));\n        }\n\n        return yield* Effect.gen(function* () {\n          const existing = yield* Database.query(\n            Query.select(Filter.foreignKeys(TaskSet.TaskSet, [fkFor(remoteTarget.id)])),\n          ).run;\n          if (existing.length > 0) {\n            return { target: Ref.make(existing[0]) };\n          }\n\n          const created = yield* Database.add(\n            TaskSet.make({\n              [Obj.Meta]: { keys: [fkFor(remoteTarget.id)] },\n              name: remoteTarget.name,\n            }),\n          );\n          return { target: Ref.make(created) };\n        }).pipe(Effect.provide(Database.layer(db)));\n      }),\n    ),\n  );\n\nexport default handler;\n"],"mappings":";;;;;;;AAcA,IAAM,SAAS,QAAgB;CAAE,QAAQ;CAAe;AAAG;;;;;;;;AAS3D,IAAM,UACJ,gBAAgB,wBAAwB,KACtC,UAAU,YACR,OAAO,WAAW,WAAW,EAAE,YAAY,gBAAgB;CACzD,IAAI,CAAC,cACH,OAAO,OAAO,OAAO,oBAAI,IAAI,MAAM,qEAAqE,CAAC;CAM3G,MAAM,KAAK,WAAW,SAAS,IAAI,YAAY,WAAW,MAAM,IAAI,KAAA;CACpE,IAAI,CAAC,IACH,OAAO,OAAO,OAAO,oBAAI,IAAI,MAAM,iCAAiC,CAAC;CAGvE,OAAO,OAAO,OAAO,IAAI,aAAa;EACpC,MAAM,WAAW,OAAO,SAAS,MAC/B,MAAM,OAAO,OAAO,YAAY,QAAQ,SAAS,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,CAAC,CAC5E,CAAC,CAAC;EACF,IAAI,SAAS,SAAS,GACpB,OAAO,EAAE,QAAQ,IAAI,KAAK,SAAS,EAAE,EAAE;EAGzC,MAAM,UAAU,OAAO,SAAS,IAC9B,QAAQ,KAAK;IACV,IAAI,OAAO,EAAE,MAAM,CAAC,MAAM,aAAa,EAAE,CAAC,EAAE;GAC7C,MAAM,aAAa;EACrB,CAAC,CACH;EACA,OAAO,EAAE,QAAQ,IAAI,KAAK,OAAO,EAAE;CACrC,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQ,SAAS,MAAM,EAAE,CAAC,CAAC;AAC5C,CAAC,CACH,CACF"}

package/dist/lib/chunk-operation-handler.mjs

@@ -0,0 +1,12 @@
+import * as Capability from "@dxos/app-framework/Capability";
+import * as Effect from "effect/Effect";
+import * as Capabilities from "@dxos/app-framework/Capabilities";
+import { GitHubOperationHandlerSet } from "#operations";
+//#region src/capabilities/operation-handler.ts
+var operation_handler_default = Capability.makeModule(Effect.fnUntraced(function* () {
+	return Capability.contribute(Capabilities.OperationHandler, GitHubOperationHandlerSet);
+}));
+//#endregion
+export { operation_handler_default as default };
+
+//# sourceMappingURL=chunk-operation-handler.mjs.map

package/dist/lib/chunk-operation-handler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-operation-handler.mjs","names":[],"sources":["../../src/capabilities/operation-handler.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport * as Capabilities from '@dxos/app-framework/Capabilities';\nimport * as Capability from '@dxos/app-framework/Capability';\n\nimport { GitHubOperationHandlerSet } from '#operations';\n\nexport default Capability.makeModule(\n  Effect.fnUntraced(function* () {\n    return Capability.contribute(Capabilities.OperationHandler, GitHubOperationHandlerSet);\n  }),\n);\n"],"mappings":";;;;;AAWA,IAAA,4BAAe,WAAW,WACxB,OAAO,WAAW,aAAa;CAC7B,OAAO,WAAW,WAAW,aAAa,kBAAkB,yBAAyB;AACvF,CAAC,CACH"}

package/dist/lib/chunk-page-action.mjs

@@ -0,0 +1,22 @@
+import * as Capability from "@dxos/app-framework/Capability";
+import * as CrxCapabilities from "@dxos/plugin-crx/CrxCapabilities";
+import { meta } from "#meta";
+import { GitHubOperation } from "#types";
+import * as Effect from "effect/Effect";
+//#region src/capabilities/page-action.ts
+var page_action_default = Capability.makeModule(() => Effect.sync(() => {
+	const actions = [{
+		id: `${meta.profile.key}/page-action/open-pull-request`,
+		label: "Open PR in Composer",
+		icon: "ph--git-pull-request--regular",
+		urlPatterns: ["https://github.com/*/*/pull/*"],
+		extractor: { name: "snapshot" },
+		contexts: ["popup", "picker"],
+		operation: GitHubOperation.ImportPullRequestFromSnapshot
+	}];
+	return Capability.contribute(CrxCapabilities.PageAction, actions);
+}));
+//#endregion
+export { page_action_default as default };
+
+//# sourceMappingURL=chunk-page-action.mjs.map

package/dist/lib/chunk-page-action.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-page-action.mjs","names":[],"sources":["../../src/capabilities/page-action.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport * as Capability from '@dxos/app-framework/Capability';\nimport * as CrxCapabilities from '@dxos/plugin-crx/CrxCapabilities';\nimport type * as PageAction from '@dxos/plugin-crx/PageAction';\n\nimport { meta } from '#meta';\nimport { GitHubOperation } from '#types';\n\nexport default Capability.makeModule(() =>\n  Effect.sync(() => {\n    // Typed array so the contribution is checked against CrxCapabilities.PageAction's value type.\n    const actions: PageAction.PageAction[] = [\n      {\n        id: `${meta.profile.key}/page-action/open-pull-request`,\n        label: 'Open PR in Composer',\n        icon: 'ph--git-pull-request--regular',\n        // `/pull/123` and anything below it (`/files`, `/commits`), which GitHub serves as the same\n        // pull request.\n        urlPatterns: ['https://github.com/*/*/pull/*'],\n        extractor: { name: 'snapshot' },\n        contexts: ['popup', 'picker'],\n        operation: GitHubOperation.ImportPullRequestFromSnapshot,\n      },\n    ];\n    return Capability.contribute(CrxCapabilities.PageAction, actions);\n  }),\n);\n"],"mappings":";;;;;;AAaA,IAAA,sBAAe,WAAW,iBACxB,OAAO,WAAW;CAEhB,MAAM,UAAmC,CACvC;EACE,IAAI,GAAG,KAAK,QAAQ,IAAI;EACxB,OAAO;EACP,MAAM;EAGN,aAAa,CAAC,+BAA+B;EAC7C,WAAW,EAAE,MAAM,WAAW;EAC9B,UAAU,CAAC,SAAS,QAAQ;EAC5B,WAAW,gBAAgB;CAC7B,CACF;CACA,OAAO,WAAW,WAAW,gBAAgB,YAAY,OAAO;AAClE,CAAC,CACH"}

package/dist/lib/chunk-pull-request.mjs

@@ -0,0 +1,58 @@
+//#region src/pull-request.ts
+/** Where a pull request lives on github.com, for a reference that carried no URL of its own. */
+var pullRequestUrl = ({ owner, repo, number }) => `https://github.com/${owner}/${repo}/pull/${number}`;
+/**
+* GitHub's pull payload as the fields a local {@link PullRequest.PullRequest} holds.
+*
+* Shared by the link preview and the import command so the two cannot disagree about what a pull
+* request looks like once it is in a space.
+*/
+var toPullRequestProps = (reference, pull) => ({
+	owner: reference.owner,
+	repo: reference.repo,
+	number: reference.number,
+	title: pull.title,
+	url: pull.html_url ?? reference.url ?? pullRequestUrl(reference),
+	state: pull.merged || pull.merged_at ? "merged" : pull.draft ? "draft" : pull.state === "closed" ? "closed" : "open",
+	author: pull.user?.login,
+	description: pull.body ?? void 0,
+	baseBranch: pull.base?.ref,
+	headBranch: pull.head?.ref,
+	additions: pull.additions,
+	deletions: pull.deletions,
+	createdAt: pull.created_at ?? void 0,
+	updatedAt: pull.updated_at ?? void 0
+});
+/** Fields a re-sync may overwrite; the coordinates and URL name the pull request and never drift. */
+var SYNCED_FIELDS = [
+	"title",
+	"state",
+	"author",
+	"description",
+	"baseBranch",
+	"headBranch",
+	"additions",
+	"deletions",
+	"createdAt",
+	"updatedAt"
+];
+/**
+* The fields where GitHub's payload differs from the stored pull request, so a re-sync writes only
+* what changed and an unchanged pull request costs no mutation.
+*
+* A field GitHub's payload leaves out is kept rather than cleared: an absent value is unknown, not empty.
+*/
+var pullRequestChanges = (pullRequest, pull) => {
+	const next = toPullRequestProps(pullRequest, pull);
+	const changes = {};
+	const copy = (field) => {
+		const value = next[field];
+		if (value !== void 0 && value !== pullRequest[field]) changes[field] = value;
+	};
+	SYNCED_FIELDS.forEach(copy);
+	return changes;
+};
+//#endregion
+export { toPullRequestProps as n, pullRequestChanges as t };
+
+//# sourceMappingURL=chunk-pull-request.mjs.map

package/dist/lib/chunk-pull-request.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-pull-request.mjs","names":[],"sources":["../../src/pull-request.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\nimport { type Obj } from '@dxos/echo';\nimport { PullRequest } from '@dxos/types';\n\nimport { type PullRequestReference } from './github-link.ts';\nimport { type GitHubApi } from './services/index.ts';\n\n/** Where a pull request lives on github.com, for a reference that carried no URL of its own. */\nexport const pullRequestUrl = ({ owner, repo, number }: PullRequestReference): string =>\n  `https://github.com/${owner}/${repo}/pull/${number}`;\n\n/**\n * GitHub's pull payload as the fields a local {@link PullRequest.PullRequest} holds.\n *\n * Shared by the link preview and the import command so the two cannot disagree about what a pull\n * request looks like once it is in a space.\n */\nexport const toPullRequestProps = (\n  reference: PullRequestReference & { url?: string },\n  pull: GitHubApi.GitHubPull,\n): Obj.MakeProps<typeof PullRequest.PullRequest> => ({\n  owner: reference.owner,\n  repo: reference.repo,\n  number: reference.number,\n  title: pull.title,\n  url: pull.html_url ?? reference.url ?? pullRequestUrl(reference),\n  // `merged_at` as well as `merged`: the list endpoints carry only the timestamp.\n  state: pull.merged || pull.merged_at ? 'merged' : pull.draft ? 'draft' : pull.state === 'closed' ? 'closed' : 'open',\n  author: pull.user?.login,\n  description: pull.body ?? undefined,\n  baseBranch: pull.base?.ref,\n  headBranch: pull.head?.ref,\n  additions: pull.additions,\n  deletions: pull.deletions,\n  createdAt: pull.created_at ?? undefined,\n  updatedAt: pull.updated_at ?? undefined,\n});\n\n/** Fields a re-sync may overwrite; the coordinates and URL name the pull request and never drift. */\nconst SYNCED_FIELDS = [\n  'title',\n  'state',\n  'author',\n  'description',\n  'baseBranch',\n  'headBranch',\n  'additions',\n  'deletions',\n  'createdAt',\n  'updatedAt',\n] as const;\n\ntype SyncedField = (typeof SYNCED_FIELDS)[number];\n\nexport type PullRequestChanges = Partial<Pick<PullRequest.PullRequest, SyncedField>>;\n\n/**\n * The fields where GitHub's payload differs from the stored pull request, so a re-sync writes only\n * what changed and an unchanged pull request costs no mutation.\n *\n * A field GitHub's payload leaves out is kept rather than cleared: an absent value is unknown, not empty.\n */\nexport const pullRequestChanges = (\n  pullRequest: PullRequest.PullRequest,\n  pull: GitHubApi.GitHubPull,\n): PullRequestChanges => {\n  const next = toPullRequestProps(pullRequest, pull);\n  const changes: PullRequestChanges = {};\n  const copy = <Field extends SyncedField>(field: Field) => {\n    const value = next[field];\n    if (value !== undefined && value !== pullRequest[field]) {\n      changes[field] = value;\n    }\n  };\n  SYNCED_FIELDS.forEach(copy);\n  return changes;\n};\n"],"mappings":";;AAWA,IAAa,kBAAkB,EAAE,OAAO,MAAM,aAC5C,sBAAsB,MAAM,GAAG,KAAK,QAAQ;;;;;;;AAQ9C,IAAa,sBACX,WACA,UACmD;CACnD,OAAO,UAAU;CACjB,MAAM,UAAU;CAChB,QAAQ,UAAU;CAClB,OAAO,KAAK;CACZ,KAAK,KAAK,YAAY,UAAU,OAAO,eAAe,SAAS;CAE/D,OAAO,KAAK,UAAU,KAAK,YAAY,WAAW,KAAK,QAAQ,UAAU,KAAK,UAAU,WAAW,WAAW;CAC9G,QAAQ,KAAK,MAAM;CACnB,aAAa,KAAK,QAAQ,KAAA;CAC1B,YAAY,KAAK,MAAM;CACvB,YAAY,KAAK,MAAM;CACvB,WAAW,KAAK;CAChB,WAAW,KAAK;CAChB,WAAW,KAAK,cAAc,KAAA;CAC9B,WAAW,KAAK,cAAc,KAAA;AAChC;;AAGA,IAAM,gBAAgB;CACpB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;;;;;;AAYA,IAAa,sBACX,aACA,SACuB;CACvB,MAAM,OAAO,mBAAmB,aAAa,IAAI;CACjD,MAAM,UAA8B,CAAC;CACrC,MAAM,QAAmC,UAAiB;EACxD,MAAM,QAAQ,KAAK;EACnB,IAAI,UAAU,KAAA,KAAa,UAAU,YAAY,QAC/C,QAAQ,SAAS;CAErB;CACA,cAAc,QAAQ,IAAI;CAC1B,OAAO;AACT"}

package/dist/lib/chunk-pull-request2.mjs

@@ -0,0 +1,110 @@
+import "./chunk-constants.mjs";
+import { t as GitHubCredentials } from "./chunk-github-api.mjs";
+import { r as GitHubPullRequestUnstoredError } from "./chunk-errors.mjs";
+import * as Effect from "effect/Effect";
+import { Database, Filter, Obj } from "@dxos/echo";
+import * as Layer from "effect/Layer";
+import { Connection } from "@dxos/link";
+//#region src/operations/pull-request.ts
+/**
+* The GitHub connection whose token requests are sent with: the first one holding a token. Shared by
+* the handlers and by the UI that sends the user to reconnect, so both name the same connection.
+*/
+var githubConnection = () => Effect.gen(function* () {
+	const connections = yield* Database.query(Filter.type(Connection.Connection)).run;
+	for (const connection of connections) {
+		if (connection.connectorId !== "github") continue;
+		const accessToken = yield* Database.load(connection.accessToken);
+		if (accessToken.token) return {
+			connection,
+			token: accessToken.token
+		};
+	}
+});
+/**
+* The token of {@link githubConnection}, or empty for anonymous — which reaches any public pull
+* request, and is the only option in a space that has not connected GitHub.
+*/
+var githubToken = () => githubConnection().pipe(Effect.map((selected) => selected?.token ?? ""));
+/**
+* The stored pull request behind an operation's input and credentials for its space.
+*
+* The invoker carries no database resolver, so handlers derive one from the pull request itself; a
+* preview card's in-memory pull request has none and cannot be acted on.
+*/
+var resolvePullRequest = (ref) => Effect.gen(function* () {
+	const pullRequest = ref.target;
+	const db = pullRequest ? Obj.getDatabase(pullRequest) : void 0;
+	if (!pullRequest || !db) return yield* Effect.die(new GitHubPullRequestUnstoredError());
+	const token = yield* githubToken().pipe(Effect.provide(Database.layer(db)));
+	return {
+		pullRequest,
+		db,
+		credentials: Layer.succeed(GitHubCredentials, { token })
+	};
+});
+var FAILED_CONCLUSIONS = /* @__PURE__ */ new Set([
+	"failure",
+	"cancelled",
+	"timed_out",
+	"action_required",
+	"startup_failure",
+	"stale"
+]);
+/** One check run as the article lists it: its outcome folded the way {@link summarizeCheckRuns} counts it. */
+var toCheckRun = (run) => {
+	const outcome = run.status !== "completed" ? "pending" : run.conclusion && FAILED_CONCLUSIONS.has(run.conclusion) ? "failure" : run.conclusion === "skipped" ? "skipped" : run.conclusion === "neutral" ? "neutral" : "success";
+	const url = run.details_url ?? run.html_url;
+	return {
+		name: run.name,
+		outcome,
+		...run.conclusion ? { conclusion: run.conclusion } : {},
+		...url ? { url } : {},
+		...run.started_at ? { startedAt: run.started_at } : {},
+		...run.completed_at ? { completedAt: run.completed_at } : {}
+	};
+};
+/** Folds a commit's check runs into one outcome: any failure fails, then any unfinished run is pending. */
+var summarizeCheckRuns = (runs) => {
+	const checks = {
+		total: runs.length,
+		passed: 0,
+		failed: 0,
+		pending: 0
+	};
+	for (const run of runs) if (run.status !== "completed") checks.pending++;
+	else if (run.conclusion && FAILED_CONCLUSIONS.has(run.conclusion)) checks.failed++;
+	else checks.passed++;
+	return {
+		ci: checks.total === 0 ? "none" : checks.failed > 0 ? "failure" : checks.pending > 0 ? "pending" : "success",
+		checks
+	};
+};
+/** Review states that set a reviewer's standing verdict; a comment leaves the previous one in place. */
+var VERDICT_STATES = /* @__PURE__ */ new Set([
+	"APPROVED",
+	"CHANGES_REQUESTED",
+	"DISMISSED"
+]);
+/**
+* Folds a pull request's reviews into where they stand, from each reviewer's latest verdict — the
+* way GitHub reads them: a later approval clears that reviewer's request for changes, and a dismissal
+* withdraws whichever verdict it replaced.
+*/
+var summarizeReviews = (reviews) => {
+	const verdicts = /* @__PURE__ */ new Map();
+	for (const review of reviews) {
+		const login = review.user?.login;
+		if (login && VERDICT_STATES.has(review.state)) verdicts.set(login, review.state);
+	}
+	const states = [...verdicts.values()];
+	const approvals = states.filter((state) => state === "APPROVED").length;
+	return {
+		review: states.includes("CHANGES_REQUESTED") ? "changes_requested" : approvals > 0 ? "approved" : "none",
+		approvals
+	};
+};
+//#endregion
+export { summarizeReviews as a, summarizeCheckRuns as i, githubToken as n, toCheckRun as o, resolvePullRequest as r, githubConnection as t };
+
+//# sourceMappingURL=chunk-pull-request2.mjs.map