@dxos/plugin-github 0.7.4 → 0.14.0

package/dist/lib/chunk-github-api.mjs

@@ -0,0 +1,375 @@
+import { t as GITHUB_API_BASE } from "./chunk-constants.mjs";
+import * as Effect from "effect/Effect";
+import { Database } from "@dxos/echo";
+import * as Schema from "effect/Schema";
+import * as Layer from "effect/Layer";
+import * as Cause from "effect/Cause";
+import * as Context from "effect/Context";
+import * as HttpClient from "effect/http/HttpClient";
+import * as HttpClientError from "effect/http/HttpClientError";
+import * as HttpClientRequest from "effect/http/HttpClientRequest";
+import * as Schedule from "effect/Schedule";
+//#region src/services/github-api.ts
+var ACCEPT = "application/vnd.github+json";
+/** Serves a pull request as the unified diff git would produce, rather than as JSON. */
+var DIFF_ACCEPT = "application/vnd.github.v3.diff";
+var API_VERSION = "2022-11-28";
+var USER_AGENT = "@dxos/plugin-github";
+var GitHubUserSchema = Schema.Struct({
+	id: Schema.Number,
+	login: Schema.String,
+	name: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	email: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	avatar_url: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	bio: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	company: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	type: Schema.NullOr(Schema.String).pipe(Schema.optional)
+});
+var GitHubOrgSchema = Schema.Struct({
+	id: Schema.Number,
+	login: Schema.String,
+	description: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	name: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	blog: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	avatar_url: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	location: Schema.NullOr(Schema.String).pipe(Schema.optional)
+});
+var GitHubRepoSchema = Schema.Struct({
+	id: Schema.Number,
+	name: Schema.String,
+	full_name: Schema.String,
+	description: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	homepage: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	archived: Schema.Boolean.pipe(Schema.optional),
+	disabled: Schema.Boolean.pipe(Schema.optional),
+	fork: Schema.Boolean.pipe(Schema.optional),
+	default_branch: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	owner: Schema.Struct({
+		id: Schema.Number,
+		login: Schema.String
+	})
+});
+var GitHubLabelSchema = Schema.Struct({ name: Schema.String });
+var GitHubPullRefSchema = Schema.Struct({
+	url: Schema.String,
+	merged_at: Schema.NullOr(Schema.String).pipe(Schema.optional)
+});
+var GitHubMilestoneSchema = Schema.Struct({
+	id: Schema.Number,
+	number: Schema.Number,
+	title: Schema.String,
+	description: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	state: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	/** ISO datetime, unlike the date-only shape the local model stores. */
+	due_on: Schema.NullOr(Schema.String).pipe(Schema.optional)
+});
+var GitHubIssueSchema = Schema.Struct({
+	id: Schema.Number,
+	number: Schema.Number,
+	title: Schema.String,
+	body: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	state: Schema.String,
+	state_reason: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	comments: Schema.Number.pipe(Schema.optional),
+	comments_url: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	created_at: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	updated_at: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	closed_at: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	user: Schema.NullOr(GitHubUserSchema).pipe(Schema.optional),
+	assignees: Schema.Array(GitHubUserSchema).pipe(Schema.optional),
+	labels: Schema.Array(GitHubLabelSchema).pipe(Schema.optional),
+	milestone: Schema.NullOr(GitHubMilestoneSchema).pipe(Schema.optional),
+	pull_request: Schema.NullOr(GitHubPullRefSchema).pipe(Schema.optional)
+});
+/** GET /repos/{owner}/{repo}/pulls/{number} — the pull-request view, which alone carries the diff size and merge state. */
+var GitHubPullSchema = Schema.Struct({
+	id: Schema.Number,
+	number: Schema.Number,
+	title: Schema.String,
+	body: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	state: Schema.String,
+	draft: Schema.Boolean.pipe(Schema.optional),
+	merged: Schema.Boolean.pipe(Schema.optional),
+	merged_at: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	created_at: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	updated_at: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	user: Schema.NullOr(GitHubUserSchema).pipe(Schema.optional),
+	labels: Schema.Array(GitHubLabelSchema).pipe(Schema.optional),
+	additions: Schema.Number.pipe(Schema.optional),
+	deletions: Schema.Number.pipe(Schema.optional),
+	base: Schema.Struct({
+		ref: Schema.String,
+		sha: Schema.String.pipe(Schema.optional)
+	}).pipe(Schema.optional),
+	head: Schema.Struct({
+		ref: Schema.String,
+		sha: Schema.String.pipe(Schema.optional)
+	}).pipe(Schema.optional)
+});
+var GitHubCommentSchema = Schema.Struct({
+	id: Schema.Number,
+	body: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	user: Schema.NullOr(GitHubUserSchema).pipe(Schema.optional),
+	created_at: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	updated_at: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	html_url: Schema.NullOr(Schema.String).pipe(Schema.optional)
+});
+/**
+* Layer-based credentials service. Mirrors `TrelloCredentials`: every API call
+* pulls the token from this service rather than threading it through as an
+* explicit parameter, so callers compose a single
+* `Effect.provide(GitHubApi.fromConnection(ref))` at the
+* operation boundary.
+*
+* Token sourcing: an operation invoked with a `Connection` composes
+* `fromConnection(ref)`; one invoked with an external-sync cursor composes
+* `fromAccessToken(cursor.spec.source)` directly (the cursor no longer relates
+* to `Connection`).
+*/
+var GitHubCredentials = class extends Context.Service()("@dxos/plugin-github/GitHubCredentials") {};
+/** Creates a credentials layer from an AccessToken ref. Loads it and returns its `token`. */
+var fromAccessToken = (accessTokenRef) => Layer.effect(GitHubCredentials, Effect.gen(function* () {
+	return { token: (yield* Database.load(accessTokenRef)).token };
+}));
+/** Creates a credentials layer from a Connection ref. Loads its `accessToken` and returns its `token`. */
+var fromConnection = (connectionRef) => Layer.effect(GitHubCredentials, Effect.gen(function* () {
+	const connection = yield* Database.load(connectionRef);
+	return { token: (yield* Database.load(connection.accessToken)).token };
+}));
+/**
+* Decide whether a GitHub request failure is worth retrying.
+*  - Transport / encode failures: yes (transient by nature).
+*  - 429 / 5xx: yes — exactly the cases retry was designed for.
+*  - 4xx other than 429 (auth, validation, not-found): no — wastes time and
+*    may exacerbate rate limiting on the same token.
+*  - TimeoutException: yes.
+*  - Schema decode failures (`ParseError`): no — payload won't become valid on retry.
+*/
+var shouldRetry = (error) => {
+	if (error instanceof Schema.SchemaError) return false;
+	if (Cause.isTimeoutError(error)) return true;
+	if (error.reason._tag !== "StatusCodeError") return true;
+	const status = error.reason.response.status;
+	return status === 429 || status >= 500 && status <= 599;
+};
+/**
+* The status a failed GitHub request answered with, or `undefined` for a transport, timeout or
+* decode failure. Callers branch on it to tell a dead credential (401) from an absent resource.
+*/
+var responseStatus = (error) => HttpClientError.isHttpClientError(error) && error.reason._tag === "StatusCodeError" ? error.reason.response.status : void 0;
+/** Anonymous when the token is empty: a bare `Bearer` header is rejected where no header is rate-limited. */
+var withAuth = (req, creds, accept = ACCEPT) => req.pipe((req) => creds.token ? HttpClientRequest.setHeader(req, "Authorization", `Bearer ${creds.token}`) : req, HttpClientRequest.setHeader("Accept", accept), HttpClientRequest.setHeader("X-GitHub-Api-Version", API_VERSION), HttpClientRequest.setHeader("User-Agent", USER_AGENT));
+/**
+* Build an unauthenticated GitHub API request, fetch + decode it as a single JSON
+* response, and apply timeout + retry. `withAuth` is applied here so callers never
+* have to remember to attach credentials (forgetting would silently 401).
+*
+* `filterStatusOk` converts non-2xx responses into a typed `ResponseError`
+* (carrying `status` and the raw body) BEFORE we try to decode the body —
+* otherwise GitHub error envelopes (`{ message, documentation_url }`) would
+* blow up against the success schema with a `ParseError`, masking the real
+* cause (e.g. a 403 from an integration token that lacks issue write).
+*/
+var githubRequest = (build, schema) => Effect.gen(function* () {
+	const creds = yield* GitHubCredentials;
+	return yield* (yield* HttpClient.HttpClient).pipe(HttpClient.transformResponse(Effect.provideService(HttpClient.TracerDisabledWhen, () => true)), HttpClient.filterStatusOk).execute(withAuth(build(), creds)).pipe(Effect.flatMap((res) => Effect.flatMap(res.json, Schema.decodeUnknownEffect(schema))), Effect.timeout("15 seconds"), Effect.retry({
+		schedule: Schedule.exponential("500 millis").pipe(Schedule.jittered, Schedule.upTo({ times: 3 })),
+		while: shouldRetry
+	}), Effect.scoped);
+});
+/**
+* Fetch a response GitHub serves as text rather than JSON — the `diff` media type, which has no
+* schema to decode against.
+*
+* The timeout is longer than `githubRequest`'s because a diff is the whole change rather than a
+* summary of it. GitHub answers 406 rather than truncating when a pull request exceeds its own
+* limits (roughly 300 files or 20k lines), which `filterStatusOk` surfaces as a typed failure.
+*/
+var githubText = (build, accept) => Effect.gen(function* () {
+	const creds = yield* GitHubCredentials;
+	return yield* (yield* HttpClient.HttpClient).pipe(HttpClient.transformResponse(Effect.provideService(HttpClient.TracerDisabledWhen, () => true)), HttpClient.filterStatusOk).execute(withAuth(build(), creds, accept)).pipe(Effect.flatMap((res) => res.text), Effect.timeout("60 seconds"), Effect.retry({
+		schedule: Schedule.exponential("500 millis").pipe(Schedule.jittered, Schedule.upTo({ times: 3 })),
+		while: shouldRetry
+	}), Effect.scoped);
+});
+/**
+* Walk paginated GitHub list endpoints by following `Link: <…>; rel="next"`.
+*
+* Sets `per_page=100` automatically; aggregates pages into a single array.
+* Returns the empty array if the first page is empty. Stops at `MAX_PAGES`
+* to bound memory + traffic for very large orgs/repos — in v1 we accept that
+* the very largest orgs may be partially synced and surface a TODO to add
+* cursor support.
+*/
+var MAX_PAGES = 10;
+var getNextLink = (header) => {
+	if (!header) return;
+	for (const part of header.split(",")) {
+		const match = part.trim().match(/^<([^>]+)>;\s*rel="([^"]+)"$/);
+		if (match && match[2] === "next") return match[1];
+	}
+};
+/**
+* Walks `rel="next"` to the end, decoding each page with `pageSchema` and taking its items through
+* `select` — an endpoint that answers with an envelope rather than a bare array pages the same way.
+*/
+var githubPages = (buildInitial, pageSchema, select) => Effect.gen(function* () {
+	const httpClient = yield* HttpClient.HttpClient;
+	const creds = yield* GitHubCredentials;
+	const clientNoTracer = httpClient.pipe(HttpClient.transformResponse(Effect.provideService(HttpClient.TracerDisabledWhen, () => true)), HttpClient.filterStatusOk);
+	let nextUrl;
+	let request = withAuth(buildInitial(), creds).pipe(HttpClientRequest.appendUrlParam("per_page", "100"));
+	const out = [];
+	for (let page = 0; page < MAX_PAGES; page++) {
+		const result = yield* clientNoTracer.execute(request).pipe(Effect.flatMap((res) => Effect.gen(function* () {
+			const body = yield* res.json;
+			return {
+				decoded: yield* Schema.decodeUnknownEffect(pageSchema)(body),
+				link: res.headers["link"]
+			};
+		})), Effect.timeout("15 seconds"), Effect.retry({
+			schedule: Schedule.exponential("500 millis").pipe(Schedule.jittered, Schedule.upTo({ times: 3 })),
+			while: shouldRetry
+		}), Effect.scoped);
+		out.push(...select(result.decoded));
+		nextUrl = getNextLink(result.link);
+		if (!nextUrl) break;
+		request = withAuth(HttpClientRequest.get(nextUrl), creds);
+	}
+	return out;
+});
+var githubPaginated = (buildInitial, itemSchema) => githubPages(buildInitial, Schema.Array(itemSchema), (page) => page);
+/** GET /user — authenticated user profile. */
+var fetchUser = () => githubRequest(() => HttpClientRequest.get(`${GITHUB_API_BASE}/user`), GitHubUserSchema);
+/**
+* GET /user/repos — every repo the authenticated user can see.
+*
+* Includes owner, collaborator, and org-member affiliations. For a GitHub App
+* user-to-server token this is intersected with the App's installation scope —
+* admins control which repos are visible by choosing All / Selected at install
+* time.
+*/
+var fetchUserRepos = () => githubPaginated(() => HttpClientRequest.get(`${GITHUB_API_BASE}/user/repos`), GitHubRepoSchema);
+/** GET /orgs/{org} — full org metadata. */
+var fetchOrg = (org) => githubRequest(() => HttpClientRequest.get(`${GITHUB_API_BASE}/orgs/${encodeURIComponent(org)}`), GitHubOrgSchema);
+/** GET /orgs/{org}/members — public + private members (depends on token). */
+var fetchOrgMembers = (org) => githubPaginated(() => HttpClientRequest.get(`${GITHUB_API_BASE}/orgs/${encodeURIComponent(org)}/members`), GitHubUserSchema);
+/**
+* GET /repos/{owner}/{repo}/issues — both issues AND pull requests.
+*
+* `state=all` includes closed. PRs are distinguishable by a non-null
+* `pull_request` field. `since` is an optional ISO timestamp; when provided,
+* GitHub returns only issues updated at or after that point — we use this
+* for incremental syncs.
+*/
+var fetchRepoIssues = (owner, repo, options = {}) => githubPaginated(() => {
+	let req = HttpClientRequest.get(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues`).pipe(HttpClientRequest.appendUrlParam("state", "all"));
+	if (options.since) req = req.pipe(HttpClientRequest.appendUrlParam("since", options.since));
+	return req;
+}, GitHubIssueSchema);
+/** GET /repos/{owner}/{repo}. */
+var fetchRepo = (owner, repo) => githubRequest(() => HttpClientRequest.get(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}`), GitHubRepoSchema);
+/** GET /repos/{owner}/{repo}/issues/{number} — an issue, or the issue view of a pull request. */
+var fetchIssue = (owner, repo, number) => githubRequest(() => HttpClientRequest.get(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}`), GitHubIssueSchema);
+/** GET /repos/{owner}/{repo}/pulls/{number}. */
+var fetchPullRequest = (owner, repo, number) => githubRequest(() => HttpClientRequest.get(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/pulls/${number}`), GitHubPullSchema);
+/**
+* GET /repos/{owner}/{repo}/pulls/{number} as a unified diff — the same bytes `git diff` would
+* produce, which is what a generated walkthrough splices its chunks from.
+*/
+var fetchPullRequestDiff = (owner, repo, number) => githubText(() => HttpClientRequest.get(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/pulls/${number}`), DIFF_ACCEPT);
+/**
+* GET /repos/{owner}/{repo}/milestones — `state=all` so closed milestones stay mirrored (the
+* issues still assigned to them have to resolve to something).
+*/
+var fetchRepoMilestones = (owner, repo) => githubPaginated(() => HttpClientRequest.get(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/milestones`).pipe(HttpClientRequest.appendUrlParam("state", "all")), GitHubMilestoneSchema);
+/**
+* Write to a GitHub object (PATCH or POST, as `build` chooses). The shape mirrors {@link githubRequest} except the
+* body is `application/json`. Failures are
+* propagated unchanged; the caller is expected to surface them on the target
+* row's `lastError`.
+*
+* Only PATCH retries (429 / 5xx retry, 4xx don't). A POST here creates a comment or a review, and
+* GitHub can commit one before the response reaches us, so retrying a timeout would post it twice.
+*/
+var githubWrite = (build, body, schema) => Effect.gen(function* () {
+	const creds = yield* GitHubCredentials;
+	const clientNoTracer = (yield* HttpClient.HttpClient).pipe(HttpClient.transformResponse(Effect.provideService(HttpClient.TracerDisabledWhen, () => true)), HttpClient.filterStatusOk);
+	const request = withAuth(build(), creds).pipe(HttpClientRequest.bodyJsonUnsafe(body));
+	const attempt = clientNoTracer.execute(request).pipe(Effect.flatMap((res) => Effect.flatMap(res.json, Schema.decodeUnknownEffect(schema))), Effect.timeout("15 seconds"));
+	return yield* (request.method === "PATCH" ? attempt.pipe(Effect.retry({
+		schedule: Schedule.exponential("500 millis").pipe(Schedule.jittered, Schedule.upTo({ times: 3 })),
+		while: shouldRetry
+	})) : attempt).pipe(Effect.scoped);
+});
+/**
+* PATCH /repos/{owner}/{repo}/issues/{number} — update title / body / state.
+*
+* GitHub conflates issues and PRs at this endpoint: the same PATCH works for
+* both, but PR-specific fields (head/base/draft) must go through the
+* `/pulls/{n}` endpoint. We only touch issue-mappable fields here.
+*/
+var updateIssue = (owner, repo, issueNumber, input) => githubWrite(() => HttpClientRequest.patch(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${issueNumber}`), input, GitHubIssueSchema);
+/**
+* PATCH /repos/{owner}/{repo} — update repo description and a small set of
+* mapped metadata. Renames (`name`) are accepted by the API but we don't push
+* them by default: a rename invalidates clones, breaks pinned URLs, and is
+* almost never what a user wants from a sync mirror.
+*/
+var updateRepo = (owner, repo, input) => githubWrite(() => HttpClientRequest.patch(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}`), input, GitHubRepoSchema);
+var GitHubReviewSchema = Schema.Struct({
+	id: Schema.Number,
+	state: Schema.String,
+	html_url: Schema.NullOr(Schema.String).pipe(Schema.optional)
+});
+/** POST /repos/{owner}/{repo}/pulls/{number}/reviews with `event: APPROVE`. */
+var approvePullRequest = (owner, repo, number, body) => githubWrite(() => HttpClientRequest.post(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/pulls/${number}/reviews`), {
+	event: "APPROVE",
+	...body ? { body } : {}
+}, GitHubReviewSchema);
+var GitHubSubmittedReviewSchema = Schema.Struct({
+	id: Schema.Number,
+	/** `APPROVED`, `CHANGES_REQUESTED`, `COMMENTED`, `DISMISSED` or `PENDING`. */
+	state: Schema.String,
+	user: Schema.NullOr(Schema.Struct({ login: Schema.String })).pipe(Schema.optional),
+	submitted_at: Schema.NullOr(Schema.String).pipe(Schema.optional)
+});
+/**
+* GET /repos/{owner}/{repo}/pulls/{number}/reviews — every page, oldest first, since a reviewer's
+* standing verdict is their latest review and a truncated list could miss it.
+*/
+var fetchReviews = (owner, repo, number) => githubPages(() => HttpClientRequest.get(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/pulls/${number}/reviews`), Schema.Array(GitHubSubmittedReviewSchema), (page) => page);
+/** POST /repos/{owner}/{repo}/issues/{number}/comments — a conversation comment, which a pull request shares with issues. */
+var createIssueComment = (owner, repo, issueNumber, body) => githubWrite(() => HttpClientRequest.post(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${issueNumber}/comments`), { body }, GitHubCommentSchema);
+var GitHubCheckRunSchema = Schema.Struct({
+	name: Schema.String,
+	/** `queued`, `in_progress` or `completed`. */
+	status: Schema.String,
+	/** Set once `completed`: `success`, `failure`, `neutral`, `cancelled`, `skipped`, `timed_out`, `action_required`. */
+	conclusion: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	/** The provider's own page for the run (Depot, say), which GitHub's `html_url` only links back to. */
+	details_url: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	started_at: Schema.NullOr(Schema.String).pipe(Schema.optional),
+	completed_at: Schema.NullOr(Schema.String).pipe(Schema.optional)
+});
+var GitHubCheckRunsSchema = Schema.Struct({
+	total_count: Schema.Number,
+	check_runs: Schema.Array(GitHubCheckRunSchema)
+});
+/**
+* GET /repos/{owner}/{repo}/commits/{sha}/check-runs — every page, since a truncated list would
+* report a failing commit as green.
+*/
+var fetchCheckRuns = (owner, repo, sha) => githubPages(() => HttpClientRequest.get(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/commits/${encodeURIComponent(sha)}/check-runs`), GitHubCheckRunsSchema, ({ check_runs }) => check_runs);
+/** POST /repos/{owner}/{repo}/pulls/{number}/comments — a review comment on one line of the diff. */
+var createReviewComment = (owner, repo, number, input) => githubWrite(() => HttpClientRequest.post(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/pulls/${number}/comments`), input, GitHubCommentSchema);
+//#endregion
+export { fromAccessToken as _, fetchCheckRuns as a, updateIssue as b, fetchOrgMembers as c, fetchRepo as d, fetchRepoIssues as f, fetchUserRepos as g, fetchUser as h, createReviewComment as i, fetchPullRequest as l, fetchReviews as m, approvePullRequest as n, fetchIssue as o, fetchRepoMilestones as p, createIssueComment as r, fetchOrg as s, GitHubCredentials as t, fetchPullRequestDiff as u, fromConnection as v, updateRepo as x, responseStatus as y };
+
+//# sourceMappingURL=chunk-github-api.mjs.map

package/dist/lib/chunk-github-api.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-github-api.mjs","names":[],"sources":["../../src/services/github-api.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\n// TODO(wittjosiah): Refactor to use a dfx-style Effect-native client.\n\nimport * as Cause from 'effect/Cause';\nimport * as Context from 'effect/Context';\nimport * as Effect from 'effect/Effect';\nimport * as HttpClient from 'effect/http/HttpClient';\nimport * as HttpClientError from 'effect/http/HttpClientError';\nimport * as HttpClientRequest from 'effect/http/HttpClientRequest';\nimport * as Layer from 'effect/Layer';\nimport * as Schedule from 'effect/Schedule';\nimport * as Schema from 'effect/Schema';\n\nimport { Database, type Ref } from '@dxos/echo';\nimport { type AccessToken, Connection } from '@dxos/link';\n\nimport { GITHUB_API_BASE } from '../constants.ts';\n\n/** Stored as `AccessToken.token`; sent as `Authorization: Bearer <token>`. Empty means anonymous. */\ntype GitHubCredentialsValue = {\n  token: string;\n};\n\nconst ACCEPT = 'application/vnd.github+json';\n/** Serves a pull request as the unified diff git would produce, rather than as JSON. */\nconst DIFF_ACCEPT = 'application/vnd.github.v3.diff';\nconst API_VERSION = '2022-11-28';\nconst USER_AGENT = '@dxos/plugin-github';\n\n//\n// Subset schemas for the responses we care about\n//\n\nconst GitHubUserSchema = Schema.Struct({\n  id: Schema.Number,\n  login: Schema.String,\n  name: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  email: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  avatar_url: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  bio: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  company: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  type: Schema.NullOr(Schema.String).pipe(Schema.optional),\n});\nexport type GitHubUser = Schema.Schema.Type<typeof GitHubUserSchema>;\n\nconst GitHubOrgSchema = Schema.Struct({\n  id: Schema.Number,\n  login: Schema.String,\n  description: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  name: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  blog: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  avatar_url: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  location: Schema.NullOr(Schema.String).pipe(Schema.optional),\n});\nexport type GitHubOrg = Schema.Schema.Type<typeof GitHubOrgSchema>;\n\nconst GitHubRepoSchema = Schema.Struct({\n  id: Schema.Number,\n  name: Schema.String,\n  full_name: Schema.String,\n  description: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  homepage: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  archived: Schema.Boolean.pipe(Schema.optional),\n  disabled: Schema.Boolean.pipe(Schema.optional),\n  fork: Schema.Boolean.pipe(Schema.optional),\n  default_branch: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  owner: Schema.Struct({ id: Schema.Number, login: Schema.String }),\n});\nexport type GitHubRepo = Schema.Schema.Type<typeof GitHubRepoSchema>;\n\nconst GitHubLabelSchema = Schema.Struct({\n  name: Schema.String,\n});\n\nconst GitHubPullRefSchema = Schema.Struct({\n  url: Schema.String,\n  merged_at: Schema.NullOr(Schema.String).pipe(Schema.optional),\n});\n\nconst GitHubMilestoneSchema = Schema.Struct({\n  id: Schema.Number,\n  number: Schema.Number,\n  title: Schema.String,\n  description: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  state: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  /** ISO datetime, unlike the date-only shape the local model stores. */\n  due_on: Schema.NullOr(Schema.String).pipe(Schema.optional),\n});\nexport type GitHubMilestone = Schema.Schema.Type<typeof GitHubMilestoneSchema>;\n\nconst GitHubIssueSchema = Schema.Struct({\n  id: Schema.Number,\n  number: Schema.Number,\n  title: Schema.String,\n  body: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  state: Schema.String,\n  state_reason: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  comments: Schema.Number.pipe(Schema.optional),\n  comments_url: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  created_at: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  updated_at: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  closed_at: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  user: Schema.NullOr(GitHubUserSchema).pipe(Schema.optional),\n  assignees: Schema.Array(GitHubUserSchema).pipe(Schema.optional),\n  labels: Schema.Array(GitHubLabelSchema).pipe(Schema.optional),\n  milestone: Schema.NullOr(GitHubMilestoneSchema).pipe(Schema.optional),\n  pull_request: Schema.NullOr(GitHubPullRefSchema).pipe(Schema.optional),\n});\nexport type GitHubIssue = Schema.Schema.Type<typeof GitHubIssueSchema>;\n\n/** GET /repos/{owner}/{repo}/pulls/{number} — the pull-request view, which alone carries the diff size and merge state. */\nconst GitHubPullSchema = Schema.Struct({\n  id: Schema.Number,\n  number: Schema.Number,\n  title: Schema.String,\n  body: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  state: Schema.String,\n  draft: Schema.Boolean.pipe(Schema.optional),\n  merged: Schema.Boolean.pipe(Schema.optional),\n  merged_at: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  created_at: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  updated_at: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  user: Schema.NullOr(GitHubUserSchema).pipe(Schema.optional),\n  labels: Schema.Array(GitHubLabelSchema).pipe(Schema.optional),\n  additions: Schema.Number.pipe(Schema.optional),\n  deletions: Schema.Number.pipe(Schema.optional),\n  // `sha` pins the commit a derived artefact (a generated walkthrough) describes; `ref` is a branch\n  // name and moves under it.\n  base: Schema.Struct({ ref: Schema.String, sha: Schema.String.pipe(Schema.optional) }).pipe(Schema.optional),\n  head: Schema.Struct({ ref: Schema.String, sha: Schema.String.pipe(Schema.optional) }).pipe(Schema.optional),\n});\nexport type GitHubPull = Schema.Schema.Type<typeof GitHubPullSchema>;\n\nconst GitHubCommentSchema = Schema.Struct({\n  id: Schema.Number,\n  body: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  user: Schema.NullOr(GitHubUserSchema).pipe(Schema.optional),\n  created_at: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  updated_at: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),\n});\nexport type GitHubComment = Schema.Schema.Type<typeof GitHubCommentSchema>;\n\n//\n// Credentials service\n//\n\n/**\n * Layer-based credentials service. Mirrors `TrelloCredentials`: every API call\n * pulls the token from this service rather than threading it through as an\n * explicit parameter, so callers compose a single\n * `Effect.provide(GitHubApi.fromConnection(ref))` at the\n * operation boundary.\n *\n * Token sourcing: an operation invoked with a `Connection` composes\n * `fromConnection(ref)`; one invoked with an external-sync cursor composes\n * `fromAccessToken(cursor.spec.source)` directly (the cursor no longer relates\n * to `Connection`).\n */\nexport class GitHubCredentials extends Context.Service<GitHubCredentials, GitHubCredentialsValue>()(\n  '@dxos/plugin-github/GitHubCredentials',\n) {}\n\n/** Creates a credentials layer from an AccessToken ref. Loads it and returns its `token`. */\nexport const fromAccessToken = (accessTokenRef: Ref.Ref<AccessToken.AccessToken>) =>\n  Layer.effect(\n    GitHubCredentials,\n    Effect.gen(function* () {\n      const accessToken = yield* Database.load(accessTokenRef);\n      return { token: accessToken.token };\n    }),\n  );\n\n/** Creates a credentials layer from a Connection ref. Loads its `accessToken` and returns its `token`. */\nexport const fromConnection = (connectionRef: Ref.Ref<Connection.Connection>) =>\n  Layer.effect(\n    GitHubCredentials,\n    Effect.gen(function* () {\n      const connection = yield* Database.load(connectionRef);\n      const accessToken = yield* Database.load(connection.accessToken);\n      return { token: accessToken.token };\n    }),\n  );\n\n//\n// Request pipeline\n//\n\nexport type GitHubEffect<T> = Effect.Effect<\n  T,\n  HttpClientError.HttpClientError | Schema.SchemaError | Cause.TimeoutError,\n  HttpClient.HttpClient | GitHubCredentials\n>;\n\n/**\n * Decide whether a GitHub request failure is worth retrying.\n *  - Transport / encode failures: yes (transient by nature).\n *  - 429 / 5xx: yes — exactly the cases retry was designed for.\n *  - 4xx other than 429 (auth, validation, not-found): no — wastes time and\n *    may exacerbate rate limiting on the same token.\n *  - TimeoutException: yes.\n *  - Schema decode failures (`ParseError`): no — payload won't become valid on retry.\n */\nconst shouldRetry = (error: HttpClientError.HttpClientError | Schema.SchemaError | Cause.TimeoutError): boolean => {\n  if (error instanceof Schema.SchemaError) {\n    return false;\n  }\n  if (Cause.isTimeoutError(error)) {\n    return true;\n  }\n  // v4 hangs the specific failure off `HttpClientError.reason`: a transport-level failure is always\n  // worth retrying, and a response failure only on 429/5xx.\n  if (error.reason._tag !== 'StatusCodeError') {\n    return true;\n  }\n  const status = error.reason.response.status;\n  return status === 429 || (status >= 500 && status <= 599);\n};\n\n/**\n * The status a failed GitHub request answered with, or `undefined` for a transport, timeout or\n * decode failure. Callers branch on it to tell a dead credential (401) from an absent resource.\n */\nexport const responseStatus = (error: unknown): number | undefined =>\n  HttpClientError.isHttpClientError(error) && error.reason._tag === 'StatusCodeError'\n    ? error.reason.response.status\n    : undefined;\n\n/** Anonymous when the token is empty: a bare `Bearer` header is rejected where no header is rate-limited. */\nconst withAuth = (req: HttpClientRequest.HttpClientRequest, creds: GitHubCredentialsValue, accept = ACCEPT) =>\n  req.pipe(\n    (req) => (creds.token ? HttpClientRequest.setHeader(req, 'Authorization', `Bearer ${creds.token}`) : req),\n    HttpClientRequest.setHeader('Accept', accept),\n    HttpClientRequest.setHeader('X-GitHub-Api-Version', API_VERSION),\n    HttpClientRequest.setHeader('User-Agent', USER_AGENT),\n  );\n\n/**\n * Build an unauthenticated GitHub API request, fetch + decode it as a single JSON\n * response, and apply timeout + retry. `withAuth` is applied here so callers never\n * have to remember to attach credentials (forgetting would silently 401).\n *\n * `filterStatusOk` converts non-2xx responses into a typed `ResponseError`\n * (carrying `status` and the raw body) BEFORE we try to decode the body —\n * otherwise GitHub error envelopes (`{ message, documentation_url }`) would\n * blow up against the success schema with a `ParseError`, masking the real\n * cause (e.g. a 403 from an integration token that lacks issue write).\n */\nconst githubRequest = <T>(build: () => HttpClientRequest.HttpClientRequest, schema: Schema.Codec<T>): GitHubEffect<T> =>\n  Effect.gen(function* () {\n    const creds = yield* GitHubCredentials;\n    const httpClient = yield* HttpClient.HttpClient;\n    const clientNoTracer = httpClient.pipe(\n      HttpClient.transformResponse(Effect.provideService(HttpClient.TracerDisabledWhen, () => true)),\n      HttpClient.filterStatusOk,\n    );\n    return yield* clientNoTracer.execute(withAuth(build(), creds)).pipe(\n      Effect.flatMap((res) => Effect.flatMap(res.json, Schema.decodeUnknownEffect(schema))),\n      Effect.timeout('15 seconds'),\n      Effect.retry({\n        schedule: Schedule.exponential('500 millis').pipe(Schedule.jittered, Schedule.upTo({ times: 3 })),\n        while: shouldRetry,\n      }),\n      Effect.scoped,\n    );\n  });\n\n/**\n * Fetch a response GitHub serves as text rather than JSON — the `diff` media type, which has no\n * schema to decode against.\n *\n * The timeout is longer than `githubRequest`'s because a diff is the whole change rather than a\n * summary of it. GitHub answers 406 rather than truncating when a pull request exceeds its own\n * limits (roughly 300 files or 20k lines), which `filterStatusOk` surfaces as a typed failure.\n */\nconst githubText = (build: () => HttpClientRequest.HttpClientRequest, accept: string): GitHubEffect<string> =>\n  Effect.gen(function* () {\n    const creds = yield* GitHubCredentials;\n    const httpClient = yield* HttpClient.HttpClient;\n    const clientNoTracer = httpClient.pipe(\n      HttpClient.transformResponse(Effect.provideService(HttpClient.TracerDisabledWhen, () => true)),\n      HttpClient.filterStatusOk,\n    );\n    return yield* clientNoTracer.execute(withAuth(build(), creds, accept)).pipe(\n      Effect.flatMap((res) => res.text),\n      Effect.timeout('60 seconds'),\n      Effect.retry({\n        schedule: Schedule.exponential('500 millis').pipe(Schedule.jittered, Schedule.upTo({ times: 3 })),\n        while: shouldRetry,\n      }),\n      Effect.scoped,\n    );\n  });\n\n//\n// Pagination\n//\n\n/**\n * Walk paginated GitHub list endpoints by following `Link: <…>; rel=\"next\"`.\n *\n * Sets `per_page=100` automatically; aggregates pages into a single array.\n * Returns the empty array if the first page is empty. Stops at `MAX_PAGES`\n * to bound memory + traffic for very large orgs/repos — in v1 we accept that\n * the very largest orgs may be partially synced and surface a TODO to add\n * cursor support.\n */\nconst MAX_PAGES = 10;\n\nconst getNextLink = (header: string | undefined): string | undefined => {\n  if (!header) {\n    return undefined;\n  }\n  // Link: <url>; rel=\"next\", <url>; rel=\"last\", …\n  for (const part of header.split(',')) {\n    const match = part.trim().match(/^<([^>]+)>;\\s*rel=\"([^\"]+)\"$/);\n    if (match && match[2] === 'next') {\n      return match[1];\n    }\n  }\n  return undefined;\n};\n\n/**\n * Walks `rel=\"next\"` to the end, decoding each page with `pageSchema` and taking its items through\n * `select` — an endpoint that answers with an envelope rather than a bare array pages the same way.\n */\nconst githubPages = <TPage, T>(\n  buildInitial: () => HttpClientRequest.HttpClientRequest,\n  pageSchema: Schema.Codec<TPage>,\n  select: (page: TPage) => readonly T[],\n): GitHubEffect<readonly T[]> =>\n  Effect.gen(function* () {\n    const httpClient = yield* HttpClient.HttpClient;\n    const creds = yield* GitHubCredentials;\n    const clientNoTracer = httpClient.pipe(\n      HttpClient.transformResponse(Effect.provideService(HttpClient.TracerDisabledWhen, () => true)),\n      HttpClient.filterStatusOk,\n    );\n\n    let nextUrl: string | undefined;\n    let request = withAuth(buildInitial(), creds).pipe(HttpClientRequest.appendUrlParam('per_page', '100'));\n    const out: T[] = [];\n\n    for (let page = 0; page < MAX_PAGES; page++) {\n      const result = yield* clientNoTracer.execute(request).pipe(\n        Effect.flatMap((res) =>\n          Effect.gen(function* () {\n            const body = yield* res.json;\n            const decoded = yield* Schema.decodeUnknownEffect(pageSchema)(body);\n            return { decoded, link: res.headers['link'] };\n          }),\n        ),\n        Effect.timeout('15 seconds'),\n        Effect.retry({\n          schedule: Schedule.exponential('500 millis').pipe(Schedule.jittered, Schedule.upTo({ times: 3 })),\n          while: shouldRetry,\n        }),\n        Effect.scoped,\n      );\n\n      out.push(...select(result.decoded));\n      nextUrl = getNextLink(result.link);\n      if (!nextUrl) {\n        break;\n      }\n      request = withAuth(HttpClientRequest.get(nextUrl), creds);\n    }\n\n    return out;\n  });\n\nconst githubPaginated = <T>(\n  buildInitial: () => HttpClientRequest.HttpClientRequest,\n  itemSchema: Schema.Codec<T>,\n): GitHubEffect<readonly T[]> => githubPages(buildInitial, Schema.Array(itemSchema), (page) => page);\n\n//\n// API surface\n//\n\n/** GET /user — authenticated user profile. */\nexport const fetchUser = (): GitHubEffect<GitHubUser> =>\n  githubRequest(() => HttpClientRequest.get(`${GITHUB_API_BASE}/user`), GitHubUserSchema);\n\n/** GET /user/orgs — orgs visible to the authenticated user. */\nexport const fetchUserOrgs = (): GitHubEffect<readonly GitHubOrg[]> =>\n  githubPaginated(() => HttpClientRequest.get(`${GITHUB_API_BASE}/user/orgs`), GitHubOrgSchema);\n\n/**\n * GET /user/repos — every repo the authenticated user can see.\n *\n * Includes owner, collaborator, and org-member affiliations. For a GitHub App\n * user-to-server token this is intersected with the App's installation scope —\n * admins control which repos are visible by choosing All / Selected at install\n * time.\n */\nexport const fetchUserRepos = (): GitHubEffect<readonly GitHubRepo[]> =>\n  githubPaginated(() => HttpClientRequest.get(`${GITHUB_API_BASE}/user/repos`), GitHubRepoSchema);\n\n/** GET /orgs/{org} — full org metadata. */\nexport const fetchOrg = (org: string): GitHubEffect<GitHubOrg> =>\n  githubRequest(() => HttpClientRequest.get(`${GITHUB_API_BASE}/orgs/${encodeURIComponent(org)}`), GitHubOrgSchema);\n\n/** GET /orgs/{org}/members — public + private members (depends on token). */\nexport const fetchOrgMembers = (org: string): GitHubEffect<readonly GitHubUser[]> =>\n  githubPaginated(\n    () => HttpClientRequest.get(`${GITHUB_API_BASE}/orgs/${encodeURIComponent(org)}/members`),\n    GitHubUserSchema,\n  );\n\n/** GET /users/{login} — full user profile (org members lists return a partial form). */\nexport const fetchUserByLogin = (login: string): GitHubEffect<GitHubUser> =>\n  githubRequest(() => HttpClientRequest.get(`${GITHUB_API_BASE}/users/${encodeURIComponent(login)}`), GitHubUserSchema);\n\n/** GET /orgs/{org}/repos — repos owned by the org. */\nexport const fetchOrgRepos = (org: string): GitHubEffect<readonly GitHubRepo[]> =>\n  githubPaginated(\n    () => HttpClientRequest.get(`${GITHUB_API_BASE}/orgs/${encodeURIComponent(org)}/repos`),\n    GitHubRepoSchema,\n  );\n\n/**\n * GET /repos/{owner}/{repo}/issues — both issues AND pull requests.\n *\n * `state=all` includes closed. PRs are distinguishable by a non-null\n * `pull_request` field. `since` is an optional ISO timestamp; when provided,\n * GitHub returns only issues updated at or after that point — we use this\n * for incremental syncs.\n */\nexport const fetchRepoIssues = (\n  owner: string,\n  repo: string,\n  options: { since?: string } = {},\n): GitHubEffect<readonly GitHubIssue[]> =>\n  githubPaginated(() => {\n    let req = HttpClientRequest.get(\n      `${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues`,\n    ).pipe(HttpClientRequest.appendUrlParam('state', 'all'));\n    if (options.since) {\n      req = req.pipe(HttpClientRequest.appendUrlParam('since', options.since));\n    }\n    return req;\n  }, GitHubIssueSchema);\n\n/** GET /repos/{owner}/{repo}. */\nexport const fetchRepo = (owner: string, repo: string): GitHubEffect<GitHubRepo> =>\n  githubRequest(\n    () => HttpClientRequest.get(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}`),\n    GitHubRepoSchema,\n  );\n\n/** GET /repos/{owner}/{repo}/issues/{number} — an issue, or the issue view of a pull request. */\nexport const fetchIssue = (owner: string, repo: string, number: number): GitHubEffect<GitHubIssue> =>\n  githubRequest(\n    () =>\n      HttpClientRequest.get(\n        `${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}`,\n      ),\n    GitHubIssueSchema,\n  );\n\n/** GET /repos/{owner}/{repo}/pulls/{number}. */\nexport const fetchPullRequest = (owner: string, repo: string, number: number): GitHubEffect<GitHubPull> =>\n  githubRequest(\n    () =>\n      HttpClientRequest.get(\n        `${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/pulls/${number}`,\n      ),\n    GitHubPullSchema,\n  );\n\n/**\n * GET /repos/{owner}/{repo}/pulls/{number} as a unified diff — the same bytes `git diff` would\n * produce, which is what a generated walkthrough splices its chunks from.\n */\nexport const fetchPullRequestDiff = (owner: string, repo: string, number: number): GitHubEffect<string> =>\n  githubText(\n    () =>\n      HttpClientRequest.get(\n        `${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/pulls/${number}`,\n      ),\n    DIFF_ACCEPT,\n  );\n\n/**\n * GET /repos/{owner}/{repo}/milestones — `state=all` so closed milestones stay mirrored (the\n * issues still assigned to them have to resolve to something).\n */\nexport const fetchRepoMilestones = (owner: string, repo: string): GitHubEffect<readonly GitHubMilestone[]> =>\n  githubPaginated(\n    () =>\n      HttpClientRequest.get(\n        `${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/milestones`,\n      ).pipe(HttpClientRequest.appendUrlParam('state', 'all')),\n    GitHubMilestoneSchema,\n  );\n\n/** GET /repos/{owner}/{repo}/issues/{number}/comments. */\nexport const fetchIssueComments = (\n  owner: string,\n  repo: string,\n  issueNumber: number,\n): GitHubEffect<readonly GitHubComment[]> =>\n  githubPaginated(\n    () =>\n      HttpClientRequest.get(\n        `${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${issueNumber}/comments`,\n      ),\n    GitHubCommentSchema,\n  );\n\n//\n// Mutations (push)\n//\n\n/**\n * Write to a GitHub object (PATCH or POST, as `build` chooses). The shape mirrors {@link githubRequest} except the\n * body is `application/json`. Failures are\n * propagated unchanged; the caller is expected to surface them on the target\n * row's `lastError`.\n *\n * Only PATCH retries (429 / 5xx retry, 4xx don't). A POST here creates a comment or a review, and\n * GitHub can commit one before the response reaches us, so retrying a timeout would post it twice.\n */\nconst githubWrite = <T>(\n  build: () => HttpClientRequest.HttpClientRequest,\n  body: Record<string, unknown>,\n  schema: Schema.Codec<T>,\n): GitHubEffect<T> =>\n  Effect.gen(function* () {\n    const creds = yield* GitHubCredentials;\n    const httpClient = yield* HttpClient.HttpClient;\n    const clientNoTracer = httpClient.pipe(\n      HttpClient.transformResponse(Effect.provideService(HttpClient.TracerDisabledWhen, () => true)),\n      HttpClient.filterStatusOk,\n    );\n    const request = withAuth(build(), creds).pipe(HttpClientRequest.bodyJsonUnsafe(body));\n    const attempt = clientNoTracer.execute(request).pipe(\n      Effect.flatMap((res) => Effect.flatMap(res.json, Schema.decodeUnknownEffect(schema))),\n      Effect.timeout('15 seconds'),\n    );\n    return yield* (\n      request.method === 'PATCH'\n        ? attempt.pipe(\n            Effect.retry({\n              schedule: Schedule.exponential('500 millis').pipe(Schedule.jittered, Schedule.upTo({ times: 3 })),\n              while: shouldRetry,\n            }),\n          )\n        : attempt\n    ).pipe(Effect.scoped);\n  });\n\nexport type IssueUpdateInput = {\n  title?: string;\n  body?: string;\n  state?: 'open' | 'closed';\n  state_reason?: 'completed' | 'not_planned' | 'reopened' | null;\n};\n\n/**\n * PATCH /repos/{owner}/{repo}/issues/{number} — update title / body / state.\n *\n * GitHub conflates issues and PRs at this endpoint: the same PATCH works for\n * both, but PR-specific fields (head/base/draft) must go through the\n * `/pulls/{n}` endpoint. We only touch issue-mappable fields here.\n */\nexport const updateIssue = (\n  owner: string,\n  repo: string,\n  issueNumber: number,\n  input: IssueUpdateInput,\n): GitHubEffect<GitHubIssue> =>\n  githubWrite(\n    () =>\n      HttpClientRequest.patch(\n        `${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${issueNumber}`,\n      ),\n    input as unknown as Record<string, unknown>,\n    GitHubIssueSchema,\n  );\n\nexport type RepoUpdateInput = {\n  /** GitHub allows the owner of a repo to rename it; this is rare and risky and we currently don't push it. */\n  name?: string;\n  description?: string;\n  homepage?: string;\n};\n\n/**\n * PATCH /repos/{owner}/{repo} — update repo description and a small set of\n * mapped metadata. Renames (`name`) are accepted by the API but we don't push\n * them by default: a rename invalidates clones, breaks pinned URLs, and is\n * almost never what a user wants from a sync mirror.\n */\nexport const updateRepo = (owner: string, repo: string, input: RepoUpdateInput): GitHubEffect<GitHubRepo> =>\n  githubWrite(\n    () => HttpClientRequest.patch(`${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}`),\n    input as unknown as Record<string, unknown>,\n    GitHubRepoSchema,\n  );\n\nconst GitHubReviewSchema = Schema.Struct({\n  id: Schema.Number,\n  state: Schema.String,\n  html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),\n});\nexport type GitHubReview = Schema.Schema.Type<typeof GitHubReviewSchema>;\n\n/** POST /repos/{owner}/{repo}/pulls/{number}/reviews with `event: APPROVE`. */\nexport const approvePullRequest = (\n  owner: string,\n  repo: string,\n  number: number,\n  body?: string,\n): GitHubEffect<GitHubReview> =>\n  githubWrite(\n    () =>\n      HttpClientRequest.post(\n        `${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/pulls/${number}/reviews`,\n      ),\n    { event: 'APPROVE', ...(body ? { body } : {}) },\n    GitHubReviewSchema,\n  );\n\nconst GitHubSubmittedReviewSchema = Schema.Struct({\n  id: Schema.Number,\n  /** `APPROVED`, `CHANGES_REQUESTED`, `COMMENTED`, `DISMISSED` or `PENDING`. */\n  state: Schema.String,\n  user: Schema.NullOr(Schema.Struct({ login: Schema.String })).pipe(Schema.optional),\n  submitted_at: Schema.NullOr(Schema.String).pipe(Schema.optional),\n});\nexport type GitHubSubmittedReview = Schema.Schema.Type<typeof GitHubSubmittedReviewSchema>;\n\n/**\n * GET /repos/{owner}/{repo}/pulls/{number}/reviews — every page, oldest first, since a reviewer's\n * standing verdict is their latest review and a truncated list could miss it.\n */\nexport const fetchReviews = (\n  owner: string,\n  repo: string,\n  number: number,\n): GitHubEffect<readonly GitHubSubmittedReview[]> =>\n  githubPages(\n    () =>\n      HttpClientRequest.get(\n        `${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/pulls/${number}/reviews`,\n      ),\n    Schema.Array(GitHubSubmittedReviewSchema),\n    (page) => page,\n  );\n\n/** POST /repos/{owner}/{repo}/issues/{number}/comments — a conversation comment, which a pull request shares with issues. */\nexport const createIssueComment = (\n  owner: string,\n  repo: string,\n  issueNumber: number,\n  body: string,\n): GitHubEffect<GitHubComment> =>\n  githubWrite(\n    () =>\n      HttpClientRequest.post(\n        `${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${issueNumber}/comments`,\n      ),\n    { body },\n    GitHubCommentSchema,\n  );\n\nconst GitHubCheckRunSchema = Schema.Struct({\n  name: Schema.String,\n  /** `queued`, `in_progress` or `completed`. */\n  status: Schema.String,\n  /** Set once `completed`: `success`, `failure`, `neutral`, `cancelled`, `skipped`, `timed_out`, `action_required`. */\n  conclusion: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  html_url: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  /** The provider's own page for the run (Depot, say), which GitHub's `html_url` only links back to. */\n  details_url: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  started_at: Schema.NullOr(Schema.String).pipe(Schema.optional),\n  completed_at: Schema.NullOr(Schema.String).pipe(Schema.optional),\n});\nexport type GitHubCheckRun = Schema.Schema.Type<typeof GitHubCheckRunSchema>;\n\nconst GitHubCheckRunsSchema = Schema.Struct({\n  total_count: Schema.Number,\n  check_runs: Schema.Array(GitHubCheckRunSchema),\n});\n\n/**\n * GET /repos/{owner}/{repo}/commits/{sha}/check-runs — every page, since a truncated list would\n * report a failing commit as green.\n */\nexport const fetchCheckRuns = (owner: string, repo: string, sha: string): GitHubEffect<readonly GitHubCheckRun[]> =>\n  githubPages(\n    () =>\n      HttpClientRequest.get(\n        `${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/commits/${encodeURIComponent(sha)}/check-runs`,\n      ),\n    GitHubCheckRunsSchema,\n    ({ check_runs }) => check_runs,\n  );\n\nexport type ReviewCommentInput = {\n  body: string;\n  /** Head SHA the line numbers refer to. */\n  commit_id: string;\n  path: string;\n  line: number;\n  /** `LEFT` is the base (removed) side, `RIGHT` the head (added or context) side. */\n  side: 'LEFT' | 'RIGHT';\n};\n\n/** POST /repos/{owner}/{repo}/pulls/{number}/comments — a review comment on one line of the diff. */\nexport const createReviewComment = (\n  owner: string,\n  repo: string,\n  number: number,\n  input: ReviewCommentInput,\n): GitHubEffect<GitHubComment> =>\n  githubWrite(\n    () =>\n      HttpClientRequest.post(\n        `${GITHUB_API_BASE}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/pulls/${number}/comments`,\n      ),\n    input,\n    GitHubCommentSchema,\n  );\n"],"mappings":";;;;;;;;;;;;AA0BA,IAAM,SAAS;;AAEf,IAAM,cAAc;AACpB,IAAM,cAAc;AACpB,IAAM,aAAa;AAMnB,IAAM,mBAAmB,OAAO,OAAO;CACrC,IAAI,OAAO;CACX,OAAO,OAAO;CACd,MAAM,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CACvD,OAAO,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CACxD,YAAY,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC7D,UAAU,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC3D,KAAK,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CACtD,SAAS,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC1D,MAAM,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;AACzD,CAAC;AAGD,IAAM,kBAAkB,OAAO,OAAO;CACpC,IAAI,OAAO;CACX,OAAO,OAAO;CACd,aAAa,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC9D,MAAM,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CACvD,MAAM,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CACvD,YAAY,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC7D,UAAU,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC3D,UAAU,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;AAC7D,CAAC;AAGD,IAAM,mBAAmB,OAAO,OAAO;CACrC,IAAI,OAAO;CACX,MAAM,OAAO;CACb,WAAW,OAAO;CAClB,aAAa,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC9D,UAAU,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC3D,UAAU,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC3D,UAAU,OAAO,QAAQ,KAAK,OAAO,QAAQ;CAC7C,UAAU,OAAO,QAAQ,KAAK,OAAO,QAAQ;CAC7C,MAAM,OAAO,QAAQ,KAAK,OAAO,QAAQ;CACzC,gBAAgB,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CACjE,OAAO,OAAO,OAAO;EAAE,IAAI,OAAO;EAAQ,OAAO,OAAO;CAAO,CAAC;AAClE,CAAC;AAGD,IAAM,oBAAoB,OAAO,OAAO,EACtC,MAAM,OAAO,OACf,CAAC;AAED,IAAM,sBAAsB,OAAO,OAAO;CACxC,KAAK,OAAO;CACZ,WAAW,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;AAC9D,CAAC;AAED,IAAM,wBAAwB,OAAO,OAAO;CAC1C,IAAI,OAAO;CACX,QAAQ,OAAO;CACf,OAAO,OAAO;CACd,aAAa,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC9D,OAAO,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;;CAExD,QAAQ,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;AAC3D,CAAC;AAGD,IAAM,oBAAoB,OAAO,OAAO;CACtC,IAAI,OAAO;CACX,QAAQ,OAAO;CACf,OAAO,OAAO;CACd,MAAM,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CACvD,OAAO,OAAO;CACd,cAAc,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC/D,UAAU,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC3D,UAAU,OAAO,OAAO,KAAK,OAAO,QAAQ;CAC5C,cAAc,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC/D,YAAY,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC7D,YAAY,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC7D,WAAW,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC5D,MAAM,OAAO,OAAO,gBAAgB,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC1D,WAAW,OAAO,MAAM,gBAAgB,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC9D,QAAQ,OAAO,MAAM,iBAAiB,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC5D,WAAW,OAAO,OAAO,qBAAqB,CAAC,CAAC,KAAK,OAAO,QAAQ;CACpE,cAAc,OAAO,OAAO,mBAAmB,CAAC,CAAC,KAAK,OAAO,QAAQ;AACvE,CAAC;;AAID,IAAM,mBAAmB,OAAO,OAAO;CACrC,IAAI,OAAO;CACX,QAAQ,OAAO;CACf,OAAO,OAAO;CACd,MAAM,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CACvD,OAAO,OAAO;CACd,OAAO,OAAO,QAAQ,KAAK,OAAO,QAAQ;CAC1C,QAAQ,OAAO,QAAQ,KAAK,OAAO,QAAQ;CAC3C,WAAW,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC5D,YAAY,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC7D,YAAY,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC7D,UAAU,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC3D,MAAM,OAAO,OAAO,gBAAgB,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC1D,QAAQ,OAAO,MAAM,iBAAiB,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC5D,WAAW,OAAO,OAAO,KAAK,OAAO,QAAQ;CAC7C,WAAW,OAAO,OAAO,KAAK,OAAO,QAAQ;CAG7C,MAAM,OAAO,OAAO;EAAE,KAAK,OAAO;EAAQ,KAAK,OAAO,OAAO,KAAK,OAAO,QAAQ;CAAE,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC1G,MAAM,OAAO,OAAO;EAAE,KAAK,OAAO;EAAQ,KAAK,OAAO,OAAO,KAAK,OAAO,QAAQ;CAAE,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQ;AAC5G,CAAC;AAGD,IAAM,sBAAsB,OAAO,OAAO;CACxC,IAAI,OAAO;CACX,MAAM,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CACvD,MAAM,OAAO,OAAO,gBAAgB,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC1D,YAAY,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC7D,YAAY,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC7D,UAAU,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;AAC7D,CAAC;;;;;;;;;;;;;AAmBD,IAAa,oBAAb,cAAuC,QAAQ,QAAmD,CAAC,CACjG,uCACF,CAAC,CAAC,CAAC;;AAGH,IAAa,mBAAmB,mBAC9B,MAAM,OACJ,mBACA,OAAO,IAAI,aAAa;CAEtB,OAAO,EAAE,QAAO,OADW,SAAS,KAAK,cAAc,EAAA,CAC3B,MAAM;AACpC,CAAC,CACH;;AAGF,IAAa,kBAAkB,kBAC7B,MAAM,OACJ,mBACA,OAAO,IAAI,aAAa;CACtB,MAAM,aAAa,OAAO,SAAS,KAAK,aAAa;CAErD,OAAO,EAAE,QAAO,OADW,SAAS,KAAK,WAAW,WAAW,EAAA,CACnC,MAAM;AACpC,CAAC,CACH;;;;;;;;;;AAqBF,IAAM,eAAe,UAA8F;CACjH,IAAI,iBAAiB,OAAO,aAC1B,OAAO;CAET,IAAI,MAAM,eAAe,KAAK,GAC5B,OAAO;CAIT,IAAI,MAAM,OAAO,SAAS,mBACxB,OAAO;CAET,MAAM,SAAS,MAAM,OAAO,SAAS;CACrC,OAAO,WAAW,OAAQ,UAAU,OAAO,UAAU;AACvD;;;;;AAMA,IAAa,kBAAkB,UAC7B,gBAAgB,kBAAkB,KAAK,KAAK,MAAM,OAAO,SAAS,oBAC9D,MAAM,OAAO,SAAS,SACtB,KAAA;;AAGN,IAAM,YAAY,KAA0C,OAA+B,SAAS,WAClG,IAAI,MACD,QAAS,MAAM,QAAQ,kBAAkB,UAAU,KAAK,iBAAiB,UAAU,MAAM,OAAO,IAAI,KACrG,kBAAkB,UAAU,UAAU,MAAM,GAC5C,kBAAkB,UAAU,wBAAwB,WAAW,GAC/D,kBAAkB,UAAU,cAAc,UAAU,CACtD;;;;;;;;;;;;AAaF,IAAM,iBAAoB,OAAkD,WAC1E,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CAMrB,OAAO,QAJgB,OADG,WAAW,WAAA,CACH,KAChC,WAAW,kBAAkB,OAAO,eAAe,WAAW,0BAA0B,IAAI,CAAC,GAC7F,WAAW,cAEC,CAAA,CAAe,QAAQ,SAAS,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAC7D,OAAO,SAAS,QAAQ,OAAO,QAAQ,IAAI,MAAM,OAAO,oBAAoB,MAAM,CAAC,CAAC,GACpF,OAAO,QAAQ,YAAY,GAC3B,OAAO,MAAM;EACX,UAAU,SAAS,YAAY,YAAY,CAAC,CAAC,KAAK,SAAS,UAAU,SAAS,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;EAChG,OAAO;CACT,CAAC,GACD,OAAO,MACT;AACF,CAAC;;;;;;;;;AAUH,IAAM,cAAc,OAAkD,WACpE,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CAMrB,OAAO,QAJgB,OADG,WAAW,WAAA,CACH,KAChC,WAAW,kBAAkB,OAAO,eAAe,WAAW,0BAA0B,IAAI,CAAC,GAC7F,WAAW,cAEC,CAAA,CAAe,QAAQ,SAAS,MAAM,GAAG,OAAO,MAAM,CAAC,CAAC,CAAC,KACrE,OAAO,SAAS,QAAQ,IAAI,IAAI,GAChC,OAAO,QAAQ,YAAY,GAC3B,OAAO,MAAM;EACX,UAAU,SAAS,YAAY,YAAY,CAAC,CAAC,KAAK,SAAS,UAAU,SAAS,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;EAChG,OAAO;CACT,CAAC,GACD,OAAO,MACT;AACF,CAAC;;;;;;;;;;AAeH,IAAM,YAAY;AAElB,IAAM,eAAe,WAAmD;CACtE,IAAI,CAAC,QACH;CAGF,KAAK,MAAM,QAAQ,OAAO,MAAM,GAAG,GAAG;EACpC,MAAM,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,8BAA8B;EAC9D,IAAI,SAAS,MAAM,OAAO,QACxB,OAAO,MAAM;CAEjB;AAEF;;;;;AAMA,IAAM,eACJ,cACA,YACA,WAEA,OAAO,IAAI,aAAa;CACtB,MAAM,aAAa,OAAO,WAAW;CACrC,MAAM,QAAQ,OAAO;CACrB,MAAM,iBAAiB,WAAW,KAChC,WAAW,kBAAkB,OAAO,eAAe,WAAW,0BAA0B,IAAI,CAAC,GAC7F,WAAW,cACb;CAEA,IAAI;CACJ,IAAI,UAAU,SAAS,aAAa,GAAG,KAAK,CAAC,CAAC,KAAK,kBAAkB,eAAe,YAAY,KAAK,CAAC;CACtG,MAAM,MAAW,CAAC;CAElB,KAAK,IAAI,OAAO,GAAG,OAAO,WAAW,QAAQ;EAC3C,MAAM,SAAS,OAAO,eAAe,QAAQ,OAAO,CAAC,CAAC,KACpD,OAAO,SAAS,QACd,OAAO,IAAI,aAAa;GACtB,MAAM,OAAO,OAAO,IAAI;GAExB,OAAO;IAAE,SAAA,OADc,OAAO,oBAAoB,UAAU,CAAC,CAAC,IAAI;IAChD,MAAM,IAAI,QAAQ;GAAQ;EAC9C,CAAC,CACH,GACA,OAAO,QAAQ,YAAY,GAC3B,OAAO,MAAM;GACX,UAAU,SAAS,YAAY,YAAY,CAAC,CAAC,KAAK,SAAS,UAAU,SAAS,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;GAChG,OAAO;EACT,CAAC,GACD,OAAO,MACT;EAEA,IAAI,KAAK,GAAG,OAAO,OAAO,OAAO,CAAC;EAClC,UAAU,YAAY,OAAO,IAAI;EACjC,IAAI,CAAC,SACH;EAEF,UAAU,SAAS,kBAAkB,IAAI,OAAO,GAAG,KAAK;CAC1D;CAEA,OAAO;AACT,CAAC;AAEH,IAAM,mBACJ,cACA,eAC+B,YAAY,cAAc,OAAO,MAAM,UAAU,IAAI,SAAS,IAAI;;AAOnG,IAAa,kBACX,oBAAoB,kBAAkB,IAAI,GAAG,gBAAgB,MAAM,GAAG,gBAAgB;;;;;;;;;AAcxF,IAAa,uBACX,sBAAsB,kBAAkB,IAAI,GAAG,gBAAgB,YAAY,GAAG,gBAAgB;;AAGhG,IAAa,YAAY,QACvB,oBAAoB,kBAAkB,IAAI,GAAG,gBAAgB,QAAQ,mBAAmB,GAAG,GAAG,GAAG,eAAe;;AAGlH,IAAa,mBAAmB,QAC9B,sBACQ,kBAAkB,IAAI,GAAG,gBAAgB,QAAQ,mBAAmB,GAAG,EAAE,SAAS,GACxF,gBACF;;;;;;;;;AAqBF,IAAa,mBACX,OACA,MACA,UAA8B,CAAC,MAE/B,sBAAsB;CACpB,IAAI,MAAM,kBAAkB,IAC1B,GAAG,gBAAgB,SAAS,mBAAmB,KAAK,EAAE,GAAG,mBAAmB,IAAI,EAAE,QACpF,CAAC,CAAC,KAAK,kBAAkB,eAAe,SAAS,KAAK,CAAC;CACvD,IAAI,QAAQ,OACV,MAAM,IAAI,KAAK,kBAAkB,eAAe,SAAS,QAAQ,KAAK,CAAC;CAEzE,OAAO;AACT,GAAG,iBAAiB;;AAGtB,IAAa,aAAa,OAAe,SACvC,oBACQ,kBAAkB,IAAI,GAAG,gBAAgB,SAAS,mBAAmB,KAAK,EAAE,GAAG,mBAAmB,IAAI,GAAG,GAC/G,gBACF;;AAGF,IAAa,cAAc,OAAe,MAAc,WACtD,oBAEI,kBAAkB,IAChB,GAAG,gBAAgB,SAAS,mBAAmB,KAAK,EAAE,GAAG,mBAAmB,IAAI,EAAE,UAAU,QAC9F,GACF,iBACF;;AAGF,IAAa,oBAAoB,OAAe,MAAc,WAC5D,oBAEI,kBAAkB,IAChB,GAAG,gBAAgB,SAAS,mBAAmB,KAAK,EAAE,GAAG,mBAAmB,IAAI,EAAE,SAAS,QAC7F,GACF,gBACF;;;;;AAMF,IAAa,wBAAwB,OAAe,MAAc,WAChE,iBAEI,kBAAkB,IAChB,GAAG,gBAAgB,SAAS,mBAAmB,KAAK,EAAE,GAAG,mBAAmB,IAAI,EAAE,SAAS,QAC7F,GACF,WACF;;;;;AAMF,IAAa,uBAAuB,OAAe,SACjD,sBAEI,kBAAkB,IAChB,GAAG,gBAAgB,SAAS,mBAAmB,KAAK,EAAE,GAAG,mBAAmB,IAAI,EAAE,YACpF,CAAC,CAAC,KAAK,kBAAkB,eAAe,SAAS,KAAK,CAAC,GACzD,qBACF;;;;;;;;;;AA6BF,IAAM,eACJ,OACA,MACA,WAEA,OAAO,IAAI,aAAa;CACtB,MAAM,QAAQ,OAAO;CAErB,MAAM,kBAAiB,OADG,WAAW,WAAA,CACH,KAChC,WAAW,kBAAkB,OAAO,eAAe,WAAW,0BAA0B,IAAI,CAAC,GAC7F,WAAW,cACb;CACA,MAAM,UAAU,SAAS,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,kBAAkB,eAAe,IAAI,CAAC;CACpF,MAAM,UAAU,eAAe,QAAQ,OAAO,CAAC,CAAC,KAC9C,OAAO,SAAS,QAAQ,OAAO,QAAQ,IAAI,MAAM,OAAO,oBAAoB,MAAM,CAAC,CAAC,GACpF,OAAO,QAAQ,YAAY,CAC7B;CACA,OAAO,QACL,QAAQ,WAAW,UACf,QAAQ,KACN,OAAO,MAAM;EACX,UAAU,SAAS,YAAY,YAAY,CAAC,CAAC,KAAK,SAAS,UAAU,SAAS,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;EAChG,OAAO;CACT,CAAC,CACH,IACA,QAAA,CACJ,KAAK,OAAO,MAAM;AACtB,CAAC;;;;;;;;AAgBH,IAAa,eACX,OACA,MACA,aACA,UAEA,kBAEI,kBAAkB,MAChB,GAAG,gBAAgB,SAAS,mBAAmB,KAAK,EAAE,GAAG,mBAAmB,IAAI,EAAE,UAAU,aAC9F,GACF,OACA,iBACF;;;;;;;AAeF,IAAa,cAAc,OAAe,MAAc,UACtD,kBACQ,kBAAkB,MAAM,GAAG,gBAAgB,SAAS,mBAAmB,KAAK,EAAE,GAAG,mBAAmB,IAAI,GAAG,GACjH,OACA,gBACF;AAEF,IAAM,qBAAqB,OAAO,OAAO;CACvC,IAAI,OAAO;CACX,OAAO,OAAO;CACd,UAAU,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;AAC7D,CAAC;;AAID,IAAa,sBACX,OACA,MACA,QACA,SAEA,kBAEI,kBAAkB,KAChB,GAAG,gBAAgB,SAAS,mBAAmB,KAAK,EAAE,GAAG,mBAAmB,IAAI,EAAE,SAAS,OAAO,SACpG,GACF;CAAE,OAAO;CAAW,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAG,GAC9C,kBACF;AAEF,IAAM,8BAA8B,OAAO,OAAO;CAChD,IAAI,OAAO;;CAEX,OAAO,OAAO;CACd,MAAM,OAAO,OAAO,OAAO,OAAO,EAAE,OAAO,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,QAAQ;CACjF,cAAc,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;AACjE,CAAC;;;;;AAOD,IAAa,gBACX,OACA,MACA,WAEA,kBAEI,kBAAkB,IAChB,GAAG,gBAAgB,SAAS,mBAAmB,KAAK,EAAE,GAAG,mBAAmB,IAAI,EAAE,SAAS,OAAO,SACpG,GACF,OAAO,MAAM,2BAA2B,IACvC,SAAS,IACZ;;AAGF,IAAa,sBACX,OACA,MACA,aACA,SAEA,kBAEI,kBAAkB,KAChB,GAAG,gBAAgB,SAAS,mBAAmB,KAAK,EAAE,GAAG,mBAAmB,IAAI,EAAE,UAAU,YAAY,UAC1G,GACF,EAAE,KAAK,GACP,mBACF;AAEF,IAAM,uBAAuB,OAAO,OAAO;CACzC,MAAM,OAAO;;CAEb,QAAQ,OAAO;;CAEf,YAAY,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC7D,UAAU,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;;CAE3D,aAAa,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC9D,YAAY,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;CAC7D,cAAc,OAAO,OAAO,OAAO,MAAM,CAAC,CAAC,KAAK,OAAO,QAAQ;AACjE,CAAC;AAGD,IAAM,wBAAwB,OAAO,OAAO;CAC1C,aAAa,OAAO;CACpB,YAAY,OAAO,MAAM,oBAAoB;AAC/C,CAAC;;;;;AAMD,IAAa,kBAAkB,OAAe,MAAc,QAC1D,kBAEI,kBAAkB,IAChB,GAAG,gBAAgB,SAAS,mBAAmB,KAAK,EAAE,GAAG,mBAAmB,IAAI,EAAE,WAAW,mBAAmB,GAAG,EAAE,YACvH,GACF,wBACC,EAAE,iBAAiB,UACtB;;AAaF,IAAa,uBACX,OACA,MACA,QACA,UAEA,kBAEI,kBAAkB,KAChB,GAAG,gBAAgB,SAAS,mBAAmB,KAAK,EAAE,GAAG,mBAAmB,IAAI,EAAE,SAAS,OAAO,UACpG,GACF,OACA,mBACF"}

package/dist/lib/chunk-github-link.mjs

@@ -0,0 +1,59 @@
+//#region src/github-link.ts
+/**
+* `https://github.com/owner/repo`, `/pull/123` or `/issues/123`, with an optional trailing slash,
+* fragment or query. A path below the repository (`/blob/…`, `/actions`) is a page, not an object.
+*/
+var GITHUB_LINK = /^https:\/\/github\.com\/([^/\s?#]+)\/([^/\s?#]+)(?:\/(pull|issues)\/(\d+)(?:[/?#]\S*)?|\/?(?:[?#]\S*)?)$/;
+/** The parts of a pull request or issue URL, or undefined for any other URL. */
+var parseGitHubLink = (url) => {
+	const match = GITHUB_LINK.exec(url);
+	if (!match) return;
+	const [, owner, repo, kind, number] = match;
+	if (!kind) return {
+		owner,
+		repo,
+		kind: "repo",
+		url
+	};
+	return {
+		owner,
+		repo,
+		kind: kind === "pull" ? "pull" : "issue",
+		number: Number(number),
+		url
+	};
+};
+/**
+* `owner/repo#123` — how a pull request is written where a URL would be noise, and the one form a
+* reviewer can type from memory.
+*/
+var PULL_REQUEST_SHORTHAND = /^([\w.-]+)\/([\w.-]+)#(\d+)$/;
+/**
+* The pull request a user's text names: a github.com URL or `owner/repo#123`.
+*
+* An `/issues/123` URL is accepted alongside `/pull/123` because GitHub itself serves a pull
+* request under both, and a reader who copied the wrong one still means the same change.
+*/
+var parsePullRequestReference = (value) => {
+	const text = value.trim();
+	const shorthand = PULL_REQUEST_SHORTHAND.exec(text);
+	if (shorthand) {
+		const [, owner, repo, number] = shorthand;
+		return {
+			owner,
+			repo,
+			number: Number(number)
+		};
+	}
+	const link = parseGitHubLink(text);
+	if (!link || link.number === void 0) return;
+	return {
+		owner: link.owner,
+		repo: link.repo,
+		number: link.number
+	};
+};
+//#endregion
+export { parseGitHubLink as n, parsePullRequestReference as r, GITHUB_LINK as t };
+
+//# sourceMappingURL=chunk-github-link.mjs.map

package/dist/lib/chunk-github-link.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-github-link.mjs","names":[],"sources":["../../src/github-link.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\n// The shapes a GitHub reference takes, and nothing else: the operations that read one run in node\n// and workerd, where importing the editor's link widget would drag React into the plugin's entry\n// (`plugin-github:check-module-structure` fails on exactly that).\n\n/**\n * `https://github.com/owner/repo`, `/pull/123` or `/issues/123`, with an optional trailing slash,\n * fragment or query. A path below the repository (`/blob/…`, `/actions`) is a page, not an object.\n */\nexport const GITHUB_LINK =\n  /^https:\\/\\/github\\.com\\/([^/\\s?#]+)\\/([^/\\s?#]+)(?:\\/(pull|issues)\\/(\\d+)(?:[/?#]\\S*)?|\\/?(?:[?#]\\S*)?)$/;\n\nexport type GitHubLink = {\n  owner: string;\n  repo: string;\n  kind: 'repo' | 'pull' | 'issue';\n  /** Absent for a repository. */\n  number?: number;\n  url: string;\n};\n\n/** The parts of a pull request or issue URL, or undefined for any other URL. */\nexport const parseGitHubLink = (url: string): GitHubLink | undefined => {\n  const match = GITHUB_LINK.exec(url);\n  if (!match) {\n    return undefined;\n  }\n  const [, owner, repo, kind, number] = match;\n  if (!kind) {\n    return { owner, repo, kind: 'repo', url };\n  }\n  return { owner, repo, kind: kind === 'pull' ? 'pull' : 'issue', number: Number(number), url };\n};\n\n/**\n * `owner/repo#123` — how a pull request is written where a URL would be noise, and the one form a\n * reviewer can type from memory.\n */\nconst PULL_REQUEST_SHORTHAND = /^([\\w.-]+)\\/([\\w.-]+)#(\\d+)$/;\n\n/** A pull request named by its coordinates, however the user wrote it. */\nexport type PullRequestReference = {\n  owner: string;\n  repo: string;\n  number: number;\n};\n\n/**\n * The pull request a user's text names: a github.com URL or `owner/repo#123`.\n *\n * An `/issues/123` URL is accepted alongside `/pull/123` because GitHub itself serves a pull\n * request under both, and a reader who copied the wrong one still means the same change.\n */\nexport const parsePullRequestReference = (value: string): PullRequestReference | undefined => {\n  const text = value.trim();\n  const shorthand = PULL_REQUEST_SHORTHAND.exec(text);\n  if (shorthand) {\n    const [, owner, repo, number] = shorthand;\n    return { owner, repo, number: Number(number) };\n  }\n\n  const link = parseGitHubLink(text);\n  if (!link || link.number === undefined) {\n    return undefined;\n  }\n  return { owner: link.owner, repo: link.repo, number: link.number };\n};\n"],"mappings":";;;;;AAYA,IAAa,cACX;;AAYF,IAAa,mBAAmB,QAAwC;CACtE,MAAM,QAAQ,YAAY,KAAK,GAAG;CAClC,IAAI,CAAC,OACH;CAEF,MAAM,GAAG,OAAO,MAAM,MAAM,UAAU;CACtC,IAAI,CAAC,MACH,OAAO;EAAE;EAAO;EAAM,MAAM;EAAQ;CAAI;CAE1C,OAAO;EAAE;EAAO;EAAM,MAAM,SAAS,SAAS,SAAS;EAAS,QAAQ,OAAO,MAAM;EAAG;CAAI;AAC9F;;;;;AAMA,IAAM,yBAAyB;;;;;;;AAe/B,IAAa,6BAA6B,UAAoD;CAC5F,MAAM,OAAO,MAAM,KAAK;CACxB,MAAM,YAAY,uBAAuB,KAAK,IAAI;CAClD,IAAI,WAAW;EACb,MAAM,GAAG,OAAO,MAAM,UAAU;EAChC,OAAO;GAAE;GAAO;GAAM,QAAQ,OAAO,MAAM;EAAE;CAC/C;CAEA,MAAM,OAAO,gBAAgB,IAAI;CACjC,IAAI,CAAC,QAAQ,KAAK,WAAW,KAAA,GAC3B;CAEF,OAAO;EAAE,OAAO,KAAK;EAAO,MAAM,KAAK;EAAM,QAAQ,KAAK;CAAO;AACnE"}

package/dist/lib/chunk-import-pull-request-from-snapshot.mjs

@@ -0,0 +1,25 @@
+import { r as parsePullRequestReference } from "./chunk-github-link.mjs";
+import { n as GitHubPullRequestReferenceError } from "./chunk-errors.mjs";
+import { GitHubOperation } from "#types";
+import * as Operation from "@dxos/compute/Operation";
+import * as Effect from "effect/Effect";
+//#region src/operations/import-pull-request-from-snapshot.ts
+/**
+* Import the pull request the extension's page is showing.
+*
+* The snapshot is read for its URL alone — the page's DOM says nothing GitHub's API does not say
+* better — and the import itself is delegated, so the anonymous fallback and the existing-object
+* check stay in one place.
+*/
+var handler = GitHubOperation.ImportPullRequestFromSnapshot.pipe(Operation.withHandler(Effect.fn(function* ({ snapshot, target }) {
+	const reference = snapshot.source.url;
+	if (!parsePullRequestReference(reference)) return yield* Effect.die(new GitHubPullRequestReferenceError({ context: { reference } }));
+	const { pullRequest } = yield* Operation.invoke(GitHubOperation.ImportPullRequest, { reference }, { spaceId: target.spaceId });
+	const object = pullRequest.target;
+	if (!object) return yield* Effect.die(new GitHubPullRequestReferenceError({ context: { reference } }));
+	return { id: object.id };
+})));
+//#endregion
+export { handler as default };
+
+//# sourceMappingURL=chunk-import-pull-request-from-snapshot.mjs.map

package/dist/lib/chunk-import-pull-request-from-snapshot.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-import-pull-request-from-snapshot.mjs","names":[],"sources":["../../src/operations/import-pull-request-from-snapshot.ts"],"sourcesContent":["//\n// Copyright 2026 DXOS.org\n//\n\nimport * as Effect from 'effect/Effect';\n\nimport * as Operation from '@dxos/compute/Operation';\n\nimport { GitHubOperation } from '#types';\n\nimport { GitHubPullRequestReferenceError } from '../errors.ts';\nimport { parsePullRequestReference } from '../github-link.ts';\n\n/**\n * Import the pull request the extension's page is showing.\n *\n * The snapshot is read for its URL alone — the page's DOM says nothing GitHub's API does not say\n * better — and the import itself is delegated, so the anonymous fallback and the existing-object\n * check stay in one place.\n */\nconst handler: Operation.WithHandler<typeof GitHubOperation.ImportPullRequestFromSnapshot> =\n  GitHubOperation.ImportPullRequestFromSnapshot.pipe(\n    Operation.withHandler(\n      Effect.fn(function* ({ snapshot, target }) {\n        const reference = snapshot.source.url;\n        if (!parsePullRequestReference(reference)) {\n          return yield* Effect.die(new GitHubPullRequestReferenceError({ context: { reference } }));\n        }\n\n        const { pullRequest } = yield* Operation.invoke(\n          GitHubOperation.ImportPullRequest,\n          { reference },\n          { spaceId: target.spaceId },\n        );\n\n        // The extension acks with an object id so the page can open what it just imported; a ref\n        // whose target did not resolve would ack success on nothing.\n        const object = pullRequest.target;\n        if (!object) {\n          return yield* Effect.die(new GitHubPullRequestReferenceError({ context: { reference } }));\n        }\n\n        return { id: object.id };\n      }),\n    ),\n  );\n\nexport default handler;\n"],"mappings":";;;;;;;;;;;;;AAoBA,IAAM,UACJ,gBAAgB,8BAA8B,KAC5C,UAAU,YACR,OAAO,GAAG,WAAW,EAAE,UAAU,UAAU;CACzC,MAAM,YAAY,SAAS,OAAO;CAClC,IAAI,CAAC,0BAA0B,SAAS,GACtC,OAAO,OAAO,OAAO,IAAI,IAAI,gCAAgC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;CAG1F,MAAM,EAAE,gBAAgB,OAAO,UAAU,OACvC,gBAAgB,mBAChB,EAAE,UAAU,GACZ,EAAE,SAAS,OAAO,QAAQ,CAC5B;CAIA,MAAM,SAAS,YAAY;CAC3B,IAAI,CAAC,QACH,OAAO,OAAO,OAAO,IAAI,IAAI,gCAAgC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;CAG1F,OAAO,EAAE,IAAI,OAAO,GAAG;AACzB,CAAC,CACH,CACF"}