@geminixiang/mikan 1.0.0-beta.2 → 1.0.0-beta.20

package/dist/adapters/github/client.js

@@ -0,0 +1,309 @@
+import { createSign } from "crypto";
+export class GithubApiError extends Error {
+    constructor(status, method, path, detail) {
+        super(`GitHub ${method} ${path} failed with ${status}: ${detail}`);
+        this.status = status;
+        this.name = "GithubApiError";
+    }
+}
+/**
+ * GitHub rate-limit responses are 429, or 403 with a rate-limit message
+ * (secondary limits). Used as the `withRetry` predicate.
+ */
+export function githubIsRateLimited(err) {
+    if (!(err instanceof GithubApiError))
+        return false;
+    return err.status === 429 || (err.status === 403 && /rate limit/i.test(err.message));
+}
+function base64Url(data) {
+    return (typeof data === "string" ? Buffer.from(data) : data).toString("base64url");
+}
+/** Refresh the cached installation token this long before it expires. */
+const TOKEN_REFRESH_MARGIN_MS = 5 * 60 * 1000;
+/**
+ * Minimal GitHub REST client authenticated as a GitHub App installation.
+ * Mints short-lived installation tokens from an RS256 app JWT and supports
+ * ETag conditional polling (304 responses don't count against the rate limit).
+ */
+export class GithubClient {
+    constructor(options) {
+        this.installationToken = null;
+        this.etags = new Map();
+        this.appId = options.appId;
+        this.privateKey = options.privateKey;
+        this.installationId = options.installationId;
+        this.baseUrl = (options.baseUrl ?? "https://api.github.com").replace(/\/+$/, "");
+        this.fetchImpl = options.fetchImpl ?? fetch;
+    }
+    /** Short-lived JWT identifying the App itself (not an installation). */
+    appJwt() {
+        const now = Math.floor(Date.now() / 1000);
+        const header = base64Url(JSON.stringify({ alg: "RS256", typ: "JWT" }));
+        // 60s clock-drift backdate; GitHub caps exp at 10 minutes.
+        const payload = base64Url(JSON.stringify({ iat: now - 60, exp: now + 540, iss: this.appId }));
+        const signature = base64Url(createSign("RSA-SHA256").update(`${header}.${payload}`).sign(this.privateKey));
+        return `${header}.${payload}.${signature}`;
+    }
+    async getInstallationToken() {
+        const cached = this.installationToken;
+        if (cached && Date.now() < cached.expiresAt - TOKEN_REFRESH_MARGIN_MS) {
+            return cached.value;
+        }
+        const data = await this.rawRequest("POST", `/app/installations/${this.installationId}/access_tokens`, { auth: `Bearer ${this.appJwt()}` });
+        this.installationToken = { value: data.token, expiresAt: Date.parse(data.expires_at) };
+        return this.installationToken.value;
+    }
+    async rawRequest(method, path, options) {
+        const headers = {
+            Accept: "application/vnd.github+json",
+            "X-GitHub-Api-Version": "2022-11-28",
+            "User-Agent": "mikan",
+            Authorization: options.auth,
+        };
+        if (options.conditional) {
+            const etag = this.etags.get(path);
+            if (etag)
+                headers["If-None-Match"] = etag;
+        }
+        const response = await this.fetchImpl(`${this.baseUrl}${path}`, {
+            method,
+            headers,
+            body: options.body !== undefined ? JSON.stringify(options.body) : undefined,
+        });
+        if (response.status === 304) {
+            return null;
+        }
+        if (!response.ok) {
+            const detail = (await response.text().catch(() => "")).slice(0, 300);
+            throw new GithubApiError(response.status, method, path, detail || response.statusText);
+        }
+        if (options.conditional) {
+            const etag = response.headers.get("etag");
+            if (etag)
+                this.etags.set(path, etag);
+        }
+        if (response.status === 204) {
+            return null;
+        }
+        return (await response.json());
+    }
+    /**
+     * Installation-authenticated request. `conditional` GETs return null on 304
+     * (nothing changed since the last call to the same path).
+     */
+    async request(method, path, options = {}) {
+        const token = await this.getInstallationToken();
+        return this.rawRequest(method, path, { ...options, auth: `Bearer ${token}` });
+    }
+    /** The App's mention slug; its comments author as `<slug>[bot]`. */
+    async getAppSlug() {
+        const app = await this.rawRequest("GET", "/app", {
+            auth: `Bearer ${this.appJwt()}`,
+        });
+        return app.slug;
+    }
+    /** Database id of a user/bot login (for noreply commit-author emails). */
+    async getUserId(login) {
+        const user = await this.request("GET", `/users/${encodeURIComponent(login)}`);
+        return user.id;
+    }
+    /**
+     * Mint a one-off installation token narrowed to a single repo and an
+     * explicit permission subset. Used for host-side git operations so the
+     * broad installation identity never leaves this process.
+     */
+    async createScopedInstallationToken(repoName, permissions) {
+        const data = await this.rawRequest("POST", `/app/installations/${this.installationId}/access_tokens`, {
+            auth: `Bearer ${this.appJwt()}`,
+            body: { repositories: [repoName], permissions },
+        });
+        return data.token;
+    }
+    async getRepository(owner, repo) {
+        const details = await this.request("GET", `/repos/${owner}/${repo}`);
+        return details;
+    }
+    /**
+     * A user's effective role on a repo: granular `role_name` plus the legacy
+     * `permission` field (callers rank whichever is stronger, so custom roles
+     * still resolve via their legacy mapping). Needs only Metadata: Read — the
+     * mandatory App permission. Unknown users resolve to none.
+     */
+    async getCollaboratorPermission(owner, repo, username) {
+        try {
+            const data = await this.request("GET", `/repos/${owner}/${repo}/collaborators/${encodeURIComponent(username)}/permission`);
+            return data;
+        }
+        catch (err) {
+            if (err instanceof GithubApiError && err.status === 404) {
+                return { permission: "none" };
+            }
+            throw err;
+        }
+    }
+    async createPullRequest(owner, repo, params) {
+        const pr = await this.request("POST", `/repos/${owner}/${repo}/pulls`, {
+            body: params,
+        });
+        return pr;
+    }
+    async getPullRequest(owner, repo, number) {
+        const pr = await this.request("GET", `/repos/${owner}/${repo}/pulls/${number}`);
+        return pr;
+    }
+    /** Changed files of one PR (first 100; enough for triage-level reads). */
+    async listPullRequestFiles(owner, repo, number) {
+        const files = await this.request("GET", `/repos/${owner}/${repo}/pulls/${number}/files?per_page=100`);
+        return files;
+    }
+    /** Submitted reviews of one PR (approvals, change requests, comments). */
+    async listPullRequestReviews(owner, repo, number) {
+        const reviews = await this.request("GET", `/repos/${owner}/${repo}/pulls/${number}/reviews?per_page=100`);
+        return reviews;
+    }
+    /** Recent comments of one issue/PR conversation, oldest first. */
+    async listIssueComments(owner, repo, number) {
+        const comments = await this.request("GET", `/repos/${owner}/${repo}/issues/${number}/comments?per_page=30`);
+        return comments;
+    }
+    /** Issues/PRs of a repo filtered for triage-style listing. */
+    async listIssues(owner, repo, filters = {}) {
+        const params = new URLSearchParams({
+            state: filters.state ?? "open",
+            sort: "updated",
+            direction: "desc",
+            per_page: "30",
+        });
+        if (filters.labels)
+            params.set("labels", filters.labels);
+        if (filters.creator)
+            params.set("creator", filters.creator);
+        const issues = await this.request("GET", `/repos/${owner}/${repo}/issues?${params}`);
+        return issues;
+    }
+    /** The open PR whose head is `branch`, or null when none exists. */
+    async findOpenPullRequestByBranch(owner, repo, branch) {
+        const prs = await this.request("GET", `/repos/${owner}/${repo}/pulls?state=open&head=${encodeURIComponent(`${owner}:${branch}`)}&per_page=1`);
+        return prs && prs.length > 0 ? prs[0] : null;
+    }
+    /** CI check runs for a ref (branch, tag, or sha). Needs Checks: Read. */
+    async listCheckRuns(owner, repo, ref) {
+        const data = await this.request("GET", `/repos/${owner}/${repo}/commits/${encodeURIComponent(ref)}/check-runs?per_page=50`);
+        return data.check_runs;
+    }
+    /**
+     * Plaintext log of one Actions job (a check-run id). Needs Actions: Read.
+     * GitHub responds with a redirect to blob storage; fetch follows it and the
+     * Authorization header is dropped cross-origin, which is what we want.
+     */
+    async getJobLog(owner, repo, jobId) {
+        const path = `/repos/${owner}/${repo}/actions/jobs/${jobId}/logs`;
+        const token = await this.getInstallationToken();
+        const response = await this.fetchImpl(`${this.baseUrl}${path}`, {
+            headers: {
+                Accept: "application/vnd.github+json",
+                "X-GitHub-Api-Version": "2022-11-28",
+                "User-Agent": "mikan",
+                Authorization: `Bearer ${token}`,
+            },
+        });
+        if (!response.ok) {
+            const detail = (await response.text().catch(() => "")).slice(0, 300);
+            throw new GithubApiError(response.status, "GET", path, detail || response.statusText);
+        }
+        return response.text();
+    }
+    async listInstallationRepositories() {
+        const data = await this.request("GET", "/installation/repositories?per_page=100");
+        return data.repositories;
+    }
+    /**
+     * All issue/PR conversation comments in a repo updated at or after `since`,
+     * oldest first. Returns null when nothing changed (ETag 304). Capped at one
+     * page; the poll cursor advances to the newest item seen, so a burst larger
+     * than 100 comments drains across consecutive polls.
+     */
+    async listIssueCommentsSince(owner, repo, since) {
+        return this.request("GET", `/repos/${owner}/${repo}/issues/comments?sort=updated&direction=asc&since=${encodeURIComponent(since)}&per_page=100`, { conditional: true });
+    }
+    /**
+     * All inline PR review comments in a repo updated at or after `since`,
+     * oldest first. Same shape and caveats as listIssueCommentsSince (one page,
+     * ETag 304 → null); review comments live in their own id space.
+     */
+    async listPullReviewCommentsSince(owner, repo, since) {
+        return this.request("GET", `/repos/${owner}/${repo}/pulls/comments?sort=updated&direction=asc&since=${encodeURIComponent(since)}&per_page=100`, { conditional: true });
+    }
+    /** All review comments on one PR (for reconstructing a thread's history). */
+    async listPullReviewComments(owner, repo, number) {
+        const comments = await this.request("GET", `/repos/${owner}/${repo}/pulls/${number}/comments?per_page=100`);
+        return comments;
+    }
+    /** Issues and PRs updated at or after `since` (GitHub lists PRs as issues). */
+    async listIssuesSince(owner, repo, since) {
+        return this.request("GET", `/repos/${owner}/${repo}/issues?state=all&sort=updated&direction=asc&since=${encodeURIComponent(since)}&per_page=100`, { conditional: true });
+    }
+    async getIssue(owner, repo, number) {
+        const issue = await this.request("GET", `/repos/${owner}/${repo}/issues/${number}`);
+        return issue;
+    }
+    async addIssueLabels(owner, repo, number, labels) {
+        await this.request("POST", `/repos/${owner}/${repo}/issues/${number}/labels`, {
+            body: { labels },
+        });
+    }
+    async removeIssueLabel(owner, repo, number, label) {
+        await this.request("DELETE", `/repos/${owner}/${repo}/issues/${number}/labels/${encodeURIComponent(label)}`);
+    }
+    async addIssueAssignees(owner, repo, number, assignees) {
+        await this.request("POST", `/repos/${owner}/${repo}/issues/${number}/assignees`, {
+            body: { assignees },
+        });
+    }
+    async removeIssueAssignees(owner, repo, number, assignees) {
+        await this.request("DELETE", `/repos/${owner}/${repo}/issues/${number}/assignees`, {
+            body: { assignees },
+        });
+    }
+    async updateIssueState(owner, repo, number, state, stateReason) {
+        await this.request("PATCH", `/repos/${owner}/${repo}/issues/${number}`, {
+            body: { state, ...(stateReason ? { state_reason: stateReason } : {}) },
+        });
+    }
+    async createIssueComment(owner, repo, number, body) {
+        const comment = await this.request("POST", `/repos/${owner}/${repo}/issues/${number}/comments`, { body: { body } });
+        return comment;
+    }
+    async updateIssueComment(owner, repo, commentId, body) {
+        await this.request("PATCH", `/repos/${owner}/${repo}/issues/comments/${commentId}`, {
+            body: { body },
+        });
+    }
+    async deleteIssueComment(owner, repo, commentId) {
+        await this.request("DELETE", `/repos/${owner}/${repo}/issues/comments/${commentId}`);
+    }
+    async createCommentReaction(owner, repo, commentId, content) {
+        await this.request("POST", `/repos/${owner}/${repo}/issues/comments/${commentId}/reactions`, {
+            body: { content },
+        });
+    }
+    /**
+     * Reply inside one review thread. GitHub 404s when `commentId` is not a
+     * review comment on PR `number` — server-side same-PR validation for free.
+     */
+    async replyToReviewComment(owner, repo, number, commentId, body) {
+        const comment = await this.request("POST", `/repos/${owner}/${repo}/pulls/${number}/comments/${commentId}/replies`, { body: { body } });
+        return comment;
+    }
+    async createReviewCommentReaction(owner, repo, commentId, content) {
+        await this.request("POST", `/repos/${owner}/${repo}/pulls/comments/${commentId}/reactions`, {
+            body: { content },
+        });
+    }
+    async createIssueReaction(owner, repo, number, content) {
+        await this.request("POST", `/repos/${owner}/${repo}/issues/${number}/reactions`, {
+            body: { content },
+        });
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/adapters/github/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/adapters/github/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAiBpC,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YACkB,MAAc,EAC9B,MAAc,EACd,IAAY,EACZ,MAAc;QAEd,KAAK,CAAC,UAAU,MAAM,IAAI,IAAI,gBAAgB,MAAM,KAAK,MAAM,EAAE,CAAC,CAAC;sBALnD,MAAM;QAMtB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAU;IAC5C,IAAI,CAAC,CAAC,GAAG,YAAY,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,OAAO,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,SAAS,CAAC,IAAqB;IACtC,OAAO,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACrF,CAAC;AAED,yEAAyE;AACzE,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C;;;;GAIG;AACH,MAAM,OAAO,YAAY;IASvB,YAAY,OAA4B;QAHhC,sBAAiB,GAAgD,IAAI,CAAC;QACtE,UAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QAGxC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,wBAAwB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC9C,CAAC;IAED,wEAAwE;IAChE,MAAM;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACvE,2DAA2D;QAC3D,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,SAAS,GAAG,SAAS,CACzB,UAAU,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAC9E,CAAC;QACF,OAAO,GAAG,MAAM,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;IAC7C,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC;QACtC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,uBAAuB,EAAE,CAAC;YACtE,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAChC,MAAM,EACN,sBAAsB,IAAI,CAAC,cAAc,gBAAgB,EACzD,EAAE,IAAI,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,CACpC,CAAC;QACF,IAAI,CAAC,iBAAiB,GAAG,EAAE,KAAK,EAAE,IAAK,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACzF,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,MAAc,EACd,IAAY,EACZ,OAAgE;QAEhE,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,6BAA6B;YACrC,sBAAsB,EAAE,YAAY;YACpC,YAAY,EAAE,OAAO;YACrB,aAAa,EAAE,OAAO,CAAC,IAAI;SAC5B,CAAC;QACF,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,IAAI;gBAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC;QAC5C,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAC9D,MAAM;YACN,OAAO;YACP,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC5E,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACrE,MAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1C,IAAI,IAAI;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IACtC,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,OAAO,GAA8C,EAAE;QAEvD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,UAAU,CAAI,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,UAAU;QACd,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAmB,KAAK,EAAE,MAAM,EAAE;YACjE,IAAI,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;SAChC,CAAC,CAAC;QACH,OAAO,GAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,SAAS,CAAC,KAAa;QAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAiB,KAAK,EAAE,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9F,OAAO,IAAK,CAAC,EAAE,CAAC;IAClB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,6BAA6B,CACjC,QAAgB,EAChB,WAAmC;QAEnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAChC,MAAM,EACN,sBAAsB,IAAI,CAAC,cAAc,gBAAgB,EACzD;YACE,IAAI,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE;YAC/B,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE;SAChD,CACF,CAAC;QACF,OAAO,IAAK,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,IAAY;QAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAA0B,KAAK,EAAE,UAAU,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9F,OAAO,OAAQ,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,yBAAyB,CAC7B,KAAa,EACb,IAAY,EACZ,QAAgB;QAEhB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,KAAK,EACL,UAAU,KAAK,IAAI,IAAI,kBAAkB,kBAAkB,CAAC,QAAQ,CAAC,aAAa,CACnF,CAAC;YACF,OAAO,IAAK,CAAC;QACf,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACxD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;YAChC,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,KAAa,EACb,IAAY,EACZ,MAAqF;QAErF,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAoB,MAAM,EAAE,UAAU,KAAK,IAAI,IAAI,QAAQ,EAAE;YACxF,IAAI,EAAE,MAAM;SACb,CAAC,CAAC;QACH,OAAO,EAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,IAAY,EAAE,MAAc;QAC9D,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAC3B,KAAK,EACL,UAAU,KAAK,IAAI,IAAI,UAAU,MAAM,EAAE,CAC1C,CAAC;QACF,OAAO,EAAG,CAAC;IACb,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,oBAAoB,CACxB,KAAa,EACb,IAAY,EACZ,MAAc;QAEd,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAC9B,KAAK,EACL,UAAU,KAAK,IAAI,IAAI,UAAU,MAAM,qBAAqB,CAC7D,CAAC;QACF,OAAO,KAAM,CAAC;IAChB,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,sBAAsB,CAC1B,KAAa,EACb,IAAY,EACZ,MAAc;QAEd,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAChC,KAAK,EACL,UAAU,KAAK,IAAI,IAAI,UAAU,MAAM,uBAAuB,CAC/D,CAAC;QACF,OAAO,OAAQ,CAAC;IAClB,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,iBAAiB,CACrB,KAAa,EACb,IAAY,EACZ,MAAc;QAEd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,KAAK,EACL,UAAU,KAAK,IAAI,IAAI,WAAW,MAAM,uBAAuB,CAChE,CAAC;QACF,OAAO,QAAS,CAAC;IACnB,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,UAAU,CACd,KAAa,EACb,IAAY,EACZ,OAAO,GAA0D,EAAE;QAEnE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM;YAC9B,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,MAAM;YACjB,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,OAAO,CAAC,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC/B,KAAK,EACL,UAAU,KAAK,IAAI,IAAI,WAAW,MAAM,EAAE,CAC3C,CAAC;QACF,OAAO,MAAO,CAAC;IACjB,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,2BAA2B,CAC/B,KAAa,EACb,IAAY,EACZ,MAAc;QAEd,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAC5B,KAAK,EACL,UAAU,KAAK,IAAI,IAAI,0BAA0B,kBAAkB,CAAC,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC,aAAa,CACvG,CAAC;QACF,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,IAAY,EAAE,GAAW;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,KAAK,EACL,UAAU,KAAK,IAAI,IAAI,YAAY,kBAAkB,CAAC,GAAG,CAAC,yBAAyB,CACpF,CAAC;QACF,OAAO,IAAK,CAAC,UAAU,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,IAAY,EAAE,KAAa;QACxD,MAAM,IAAI,GAAG,UAAU,KAAK,IAAI,IAAI,iBAAiB,KAAK,OAAO,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAC9D,OAAO,EAAE;gBACP,MAAM,EAAE,6BAA6B;gBACrC,sBAAsB,EAAE,YAAY;gBACpC,YAAY,EAAE,OAAO;gBACrB,aAAa,EAAE,UAAU,KAAK,EAAE;aACjC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACrE,MAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,4BAA4B;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAC7B,KAAK,EACL,yCAAyC,CAC1C,CAAC;QACF,OAAO,IAAK,CAAC,YAAY,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,sBAAsB,CAC1B,KAAa,EACb,IAAY,EACZ,KAAa;QAEb,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,UAAU,KAAK,IAAI,IAAI,qDAAqD,kBAAkB,CAAC,KAAK,CAAC,eAAe,EACpH,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,2BAA2B,CAC/B,KAAa,EACb,IAAY,EACZ,KAAa;QAEb,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,UAAU,KAAK,IAAI,IAAI,oDAAoD,kBAAkB,CAAC,KAAK,CAAC,eAAe,EACnH,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,KAAK,CAAC,sBAAsB,CAC1B,KAAa,EACb,IAAY,EACZ,MAAc;QAEd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CACjC,KAAK,EACL,UAAU,KAAK,IAAI,IAAI,UAAU,MAAM,wBAAwB,CAChE,CAAC;QACF,OAAO,QAAS,CAAC;IACnB,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,eAAe,CAAC,KAAa,EAAE,IAAY,EAAE,KAAa;QAC9D,OAAO,IAAI,CAAC,OAAO,CACjB,KAAK,EACL,UAAU,KAAK,IAAI,IAAI,sDAAsD,kBAAkB,CAAC,KAAK,CAAC,eAAe,EACrH,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,IAAY,EAAE,MAAc;QACxD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAC9B,KAAK,EACL,UAAU,KAAK,IAAI,IAAI,WAAW,MAAM,EAAE,CAC3C,CAAC;QACF,OAAO,KAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAa,EACb,IAAY,EACZ,MAAc,EACd,MAAgB;QAEhB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,IAAI,WAAW,MAAM,SAAS,EAAE;YAC5E,IAAI,EAAE,EAAE,MAAM,EAAE;SACjB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,KAAa,EACb,IAAY,EACZ,MAAc,EACd,KAAa;QAEb,MAAM,IAAI,CAAC,OAAO,CAChB,QAAQ,EACR,UAAU,KAAK,IAAI,IAAI,WAAW,MAAM,WAAW,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAC/E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,KAAa,EACb,IAAY,EACZ,MAAc,EACd,SAAmB;QAEnB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,IAAI,WAAW,MAAM,YAAY,EAAE;YAC/E,IAAI,EAAE,EAAE,SAAS,EAAE;SACpB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,KAAa,EACb,IAAY,EACZ,MAAc,EACd,SAAmB;QAEnB,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,KAAK,IAAI,IAAI,WAAW,MAAM,YAAY,EAAE;YACjF,IAAI,EAAE,EAAE,SAAS,EAAE;SACpB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,KAAa,EACb,IAAY,EACZ,MAAc,EACd,KAAwB,EACxB,WAAoB;QAEpB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,IAAI,WAAW,MAAM,EAAE,EAAE;YACtE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SACvE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,KAAa,EACb,IAAY,EACZ,MAAc,EACd,IAAY;QAEZ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAChC,MAAM,EACN,UAAU,KAAK,IAAI,IAAI,WAAW,MAAM,WAAW,EACnD,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CACnB,CAAC;QACF,OAAO,OAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,KAAa,EACb,IAAY,EACZ,SAAiB,EACjB,IAAY;QAEZ,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,IAAI,oBAAoB,SAAS,EAAE,EAAE;YAClF,IAAI,EAAE,EAAE,IAAI,EAAE;SACf,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAa,EAAE,IAAY,EAAE,SAAiB;QACrE,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,KAAK,IAAI,IAAI,oBAAoB,SAAS,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,KAAa,EACb,IAAY,EACZ,SAAiB,EACjB,OAA8B;QAE9B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,IAAI,oBAAoB,SAAS,YAAY,EAAE;YAC3F,IAAI,EAAE,EAAE,OAAO,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,oBAAoB,CACxB,KAAa,EACb,IAAY,EACZ,MAAc,EACd,SAAiB,EACjB,IAAY;QAEZ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAChC,MAAM,EACN,UAAU,KAAK,IAAI,IAAI,UAAU,MAAM,aAAa,SAAS,UAAU,EACvE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CACnB,CAAC;QACF,OAAO,OAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,2BAA2B,CAC/B,KAAa,EACb,IAAY,EACZ,SAAiB,EACjB,OAA8B;QAE9B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,IAAI,mBAAmB,SAAS,YAAY,EAAE;YAC1F,IAAI,EAAE,EAAE,OAAO,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,KAAa,EACb,IAAY,EACZ,MAAc,EACd,OAA8B;QAE9B,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,IAAI,WAAW,MAAM,YAAY,EAAE;YAC/E,IAAI,EAAE,EAAE,OAAO,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import { createSign } from \"crypto\";\nimport type {\n  GithubCheckRun,\n  GithubClientOptions,\n  GithubCollaboratorPermission,\n  GithubIssue,\n  GithubIssueComment,\n  GithubPullRequest,\n  GithubPullRequestFile,\n  GithubPullRequestReview,\n  GithubReactionContent,\n  GithubRepository,\n  GithubRepositoryDetails,\n  GithubReviewComment,\n  GithubTokenPermissions,\n} from \"./types.js\";\n\nexport class GithubApiError extends Error {\n  constructor(\n    public readonly status: number,\n    method: string,\n    path: string,\n    detail: string,\n  ) {\n    super(`GitHub ${method} ${path} failed with ${status}: ${detail}`);\n    this.name = \"GithubApiError\";\n  }\n}\n\n/**\n * GitHub rate-limit responses are 429, or 403 with a rate-limit message\n * (secondary limits). Used as the `withRetry` predicate.\n */\nexport function githubIsRateLimited(err: Error): boolean {\n  if (!(err instanceof GithubApiError)) return false;\n  return err.status === 429 || (err.status === 403 && /rate limit/i.test(err.message));\n}\n\nfunction base64Url(data: string | Buffer): string {\n  return (typeof data === \"string\" ? Buffer.from(data) : data).toString(\"base64url\");\n}\n\n/** Refresh the cached installation token this long before it expires. */\nconst TOKEN_REFRESH_MARGIN_MS = 5 * 60 * 1000;\n\n/**\n * Minimal GitHub REST client authenticated as a GitHub App installation.\n * Mints short-lived installation tokens from an RS256 app JWT and supports\n * ETag conditional polling (304 responses don't count against the rate limit).\n */\nexport class GithubClient {\n  private readonly appId: string;\n  private readonly privateKey: string;\n  private readonly installationId: string;\n  private readonly baseUrl: string;\n  private readonly fetchImpl: typeof fetch;\n  private installationToken: { value: string; expiresAt: number } | null = null;\n  private etags = new Map<string, string>();\n\n  constructor(options: GithubClientOptions) {\n    this.appId = options.appId;\n    this.privateKey = options.privateKey;\n    this.installationId = options.installationId;\n    this.baseUrl = (options.baseUrl ?? \"https://api.github.com\").replace(/\\/+$/, \"\");\n    this.fetchImpl = options.fetchImpl ?? fetch;\n  }\n\n  /** Short-lived JWT identifying the App itself (not an installation). */\n  private appJwt(): string {\n    const now = Math.floor(Date.now() / 1000);\n    const header = base64Url(JSON.stringify({ alg: \"RS256\", typ: \"JWT\" }));\n    // 60s clock-drift backdate; GitHub caps exp at 10 minutes.\n    const payload = base64Url(JSON.stringify({ iat: now - 60, exp: now + 540, iss: this.appId }));\n    const signature = base64Url(\n      createSign(\"RSA-SHA256\").update(`${header}.${payload}`).sign(this.privateKey),\n    );\n    return `${header}.${payload}.${signature}`;\n  }\n\n  private async getInstallationToken(): Promise<string> {\n    const cached = this.installationToken;\n    if (cached && Date.now() < cached.expiresAt - TOKEN_REFRESH_MARGIN_MS) {\n      return cached.value;\n    }\n    const data = await this.rawRequest<{ token: string; expires_at: string }>(\n      \"POST\",\n      `/app/installations/${this.installationId}/access_tokens`,\n      { auth: `Bearer ${this.appJwt()}` },\n    );\n    this.installationToken = { value: data!.token, expiresAt: Date.parse(data!.expires_at) };\n    return this.installationToken.value;\n  }\n\n  private async rawRequest<T>(\n    method: string,\n    path: string,\n    options: { auth: string; body?: unknown; conditional?: boolean },\n  ): Promise<T | null> {\n    const headers: Record<string, string> = {\n      Accept: \"application/vnd.github+json\",\n      \"X-GitHub-Api-Version\": \"2022-11-28\",\n      \"User-Agent\": \"mikan\",\n      Authorization: options.auth,\n    };\n    if (options.conditional) {\n      const etag = this.etags.get(path);\n      if (etag) headers[\"If-None-Match\"] = etag;\n    }\n    const response = await this.fetchImpl(`${this.baseUrl}${path}`, {\n      method,\n      headers,\n      body: options.body !== undefined ? JSON.stringify(options.body) : undefined,\n    });\n    if (response.status === 304) {\n      return null;\n    }\n    if (!response.ok) {\n      const detail = (await response.text().catch(() => \"\")).slice(0, 300);\n      throw new GithubApiError(response.status, method, path, detail || response.statusText);\n    }\n    if (options.conditional) {\n      const etag = response.headers.get(\"etag\");\n      if (etag) this.etags.set(path, etag);\n    }\n    if (response.status === 204) {\n      return null;\n    }\n    return (await response.json()) as T;\n  }\n\n  /**\n   * Installation-authenticated request. `conditional` GETs return null on 304\n   * (nothing changed since the last call to the same path).\n   */\n  private async request<T>(\n    method: string,\n    path: string,\n    options: { body?: unknown; conditional?: boolean } = {},\n  ): Promise<T | null> {\n    const token = await this.getInstallationToken();\n    return this.rawRequest<T>(method, path, { ...options, auth: `Bearer ${token}` });\n  }\n\n  /** The App's mention slug; its comments author as `<slug>[bot]`. */\n  async getAppSlug(): Promise<string> {\n    const app = await this.rawRequest<{ slug: string }>(\"GET\", \"/app\", {\n      auth: `Bearer ${this.appJwt()}`,\n    });\n    return app!.slug;\n  }\n\n  /** Database id of a user/bot login (for noreply commit-author emails). */\n  async getUserId(login: string): Promise<number> {\n    const user = await this.request<{ id: number }>(\"GET\", `/users/${encodeURIComponent(login)}`);\n    return user!.id;\n  }\n\n  /**\n   * Mint a one-off installation token narrowed to a single repo and an\n   * explicit permission subset. Used for host-side git operations so the\n   * broad installation identity never leaves this process.\n   */\n  async createScopedInstallationToken(\n    repoName: string,\n    permissions: GithubTokenPermissions,\n  ): Promise<string> {\n    const data = await this.rawRequest<{ token: string }>(\n      \"POST\",\n      `/app/installations/${this.installationId}/access_tokens`,\n      {\n        auth: `Bearer ${this.appJwt()}`,\n        body: { repositories: [repoName], permissions },\n      },\n    );\n    return data!.token;\n  }\n\n  async getRepository(owner: string, repo: string): Promise<GithubRepositoryDetails> {\n    const details = await this.request<GithubRepositoryDetails>(\"GET\", `/repos/${owner}/${repo}`);\n    return details!;\n  }\n\n  /**\n   * A user's effective role on a repo: granular `role_name` plus the legacy\n   * `permission` field (callers rank whichever is stronger, so custom roles\n   * still resolve via their legacy mapping). Needs only Metadata: Read — the\n   * mandatory App permission. Unknown users resolve to none.\n   */\n  async getCollaboratorPermission(\n    owner: string,\n    repo: string,\n    username: string,\n  ): Promise<GithubCollaboratorPermission> {\n    try {\n      const data = await this.request<GithubCollaboratorPermission>(\n        \"GET\",\n        `/repos/${owner}/${repo}/collaborators/${encodeURIComponent(username)}/permission`,\n      );\n      return data!;\n    } catch (err) {\n      if (err instanceof GithubApiError && err.status === 404) {\n        return { permission: \"none\" };\n      }\n      throw err;\n    }\n  }\n\n  async createPullRequest(\n    owner: string,\n    repo: string,\n    params: { title: string; head: string; base: string; body?: string; draft?: boolean },\n  ): Promise<GithubPullRequest> {\n    const pr = await this.request<GithubPullRequest>(\"POST\", `/repos/${owner}/${repo}/pulls`, {\n      body: params,\n    });\n    return pr!;\n  }\n\n  async getPullRequest(owner: string, repo: string, number: number): Promise<GithubPullRequest> {\n    const pr = await this.request<GithubPullRequest>(\n      \"GET\",\n      `/repos/${owner}/${repo}/pulls/${number}`,\n    );\n    return pr!;\n  }\n\n  /** Changed files of one PR (first 100; enough for triage-level reads). */\n  async listPullRequestFiles(\n    owner: string,\n    repo: string,\n    number: number,\n  ): Promise<GithubPullRequestFile[]> {\n    const files = await this.request<GithubPullRequestFile[]>(\n      \"GET\",\n      `/repos/${owner}/${repo}/pulls/${number}/files?per_page=100`,\n    );\n    return files!;\n  }\n\n  /** Submitted reviews of one PR (approvals, change requests, comments). */\n  async listPullRequestReviews(\n    owner: string,\n    repo: string,\n    number: number,\n  ): Promise<GithubPullRequestReview[]> {\n    const reviews = await this.request<GithubPullRequestReview[]>(\n      \"GET\",\n      `/repos/${owner}/${repo}/pulls/${number}/reviews?per_page=100`,\n    );\n    return reviews!;\n  }\n\n  /** Recent comments of one issue/PR conversation, oldest first. */\n  async listIssueComments(\n    owner: string,\n    repo: string,\n    number: number,\n  ): Promise<GithubIssueComment[]> {\n    const comments = await this.request<GithubIssueComment[]>(\n      \"GET\",\n      `/repos/${owner}/${repo}/issues/${number}/comments?per_page=30`,\n    );\n    return comments!;\n  }\n\n  /** Issues/PRs of a repo filtered for triage-style listing. */\n  async listIssues(\n    owner: string,\n    repo: string,\n    filters: { state?: string; labels?: string; creator?: string } = {},\n  ): Promise<GithubIssue[]> {\n    const params = new URLSearchParams({\n      state: filters.state ?? \"open\",\n      sort: \"updated\",\n      direction: \"desc\",\n      per_page: \"30\",\n    });\n    if (filters.labels) params.set(\"labels\", filters.labels);\n    if (filters.creator) params.set(\"creator\", filters.creator);\n    const issues = await this.request<GithubIssue[]>(\n      \"GET\",\n      `/repos/${owner}/${repo}/issues?${params}`,\n    );\n    return issues!;\n  }\n\n  /** The open PR whose head is `branch`, or null when none exists. */\n  async findOpenPullRequestByBranch(\n    owner: string,\n    repo: string,\n    branch: string,\n  ): Promise<GithubPullRequest | null> {\n    const prs = await this.request<GithubPullRequest[]>(\n      \"GET\",\n      `/repos/${owner}/${repo}/pulls?state=open&head=${encodeURIComponent(`${owner}:${branch}`)}&per_page=1`,\n    );\n    return prs && prs.length > 0 ? prs[0] : null;\n  }\n\n  /** CI check runs for a ref (branch, tag, or sha). Needs Checks: Read. */\n  async listCheckRuns(owner: string, repo: string, ref: string): Promise<GithubCheckRun[]> {\n    const data = await this.request<{ check_runs: GithubCheckRun[] }>(\n      \"GET\",\n      `/repos/${owner}/${repo}/commits/${encodeURIComponent(ref)}/check-runs?per_page=50`,\n    );\n    return data!.check_runs;\n  }\n\n  /**\n   * Plaintext log of one Actions job (a check-run id). Needs Actions: Read.\n   * GitHub responds with a redirect to blob storage; fetch follows it and the\n   * Authorization header is dropped cross-origin, which is what we want.\n   */\n  async getJobLog(owner: string, repo: string, jobId: number): Promise<string> {\n    const path = `/repos/${owner}/${repo}/actions/jobs/${jobId}/logs`;\n    const token = await this.getInstallationToken();\n    const response = await this.fetchImpl(`${this.baseUrl}${path}`, {\n      headers: {\n        Accept: \"application/vnd.github+json\",\n        \"X-GitHub-Api-Version\": \"2022-11-28\",\n        \"User-Agent\": \"mikan\",\n        Authorization: `Bearer ${token}`,\n      },\n    });\n    if (!response.ok) {\n      const detail = (await response.text().catch(() => \"\")).slice(0, 300);\n      throw new GithubApiError(response.status, \"GET\", path, detail || response.statusText);\n    }\n    return response.text();\n  }\n\n  async listInstallationRepositories(): Promise<GithubRepository[]> {\n    const data = await this.request<{ repositories: GithubRepository[] }>(\n      \"GET\",\n      \"/installation/repositories?per_page=100\",\n    );\n    return data!.repositories;\n  }\n\n  /**\n   * All issue/PR conversation comments in a repo updated at or after `since`,\n   * oldest first. Returns null when nothing changed (ETag 304). Capped at one\n   * page; the poll cursor advances to the newest item seen, so a burst larger\n   * than 100 comments drains across consecutive polls.\n   */\n  async listIssueCommentsSince(\n    owner: string,\n    repo: string,\n    since: string,\n  ): Promise<GithubIssueComment[] | null> {\n    return this.request<GithubIssueComment[]>(\n      \"GET\",\n      `/repos/${owner}/${repo}/issues/comments?sort=updated&direction=asc&since=${encodeURIComponent(since)}&per_page=100`,\n      { conditional: true },\n    );\n  }\n\n  /**\n   * All inline PR review comments in a repo updated at or after `since`,\n   * oldest first. Same shape and caveats as listIssueCommentsSince (one page,\n   * ETag 304 → null); review comments live in their own id space.\n   */\n  async listPullReviewCommentsSince(\n    owner: string,\n    repo: string,\n    since: string,\n  ): Promise<GithubReviewComment[] | null> {\n    return this.request<GithubReviewComment[]>(\n      \"GET\",\n      `/repos/${owner}/${repo}/pulls/comments?sort=updated&direction=asc&since=${encodeURIComponent(since)}&per_page=100`,\n      { conditional: true },\n    );\n  }\n\n  /** All review comments on one PR (for reconstructing a thread's history). */\n  async listPullReviewComments(\n    owner: string,\n    repo: string,\n    number: number,\n  ): Promise<GithubReviewComment[]> {\n    const comments = await this.request<GithubReviewComment[]>(\n      \"GET\",\n      `/repos/${owner}/${repo}/pulls/${number}/comments?per_page=100`,\n    );\n    return comments!;\n  }\n\n  /** Issues and PRs updated at or after `since` (GitHub lists PRs as issues). */\n  async listIssuesSince(owner: string, repo: string, since: string): Promise<GithubIssue[] | null> {\n    return this.request<GithubIssue[]>(\n      \"GET\",\n      `/repos/${owner}/${repo}/issues?state=all&sort=updated&direction=asc&since=${encodeURIComponent(since)}&per_page=100`,\n      { conditional: true },\n    );\n  }\n\n  async getIssue(owner: string, repo: string, number: number): Promise<GithubIssue> {\n    const issue = await this.request<GithubIssue>(\n      \"GET\",\n      `/repos/${owner}/${repo}/issues/${number}`,\n    );\n    return issue!;\n  }\n\n  async addIssueLabels(\n    owner: string,\n    repo: string,\n    number: number,\n    labels: string[],\n  ): Promise<void> {\n    await this.request(\"POST\", `/repos/${owner}/${repo}/issues/${number}/labels`, {\n      body: { labels },\n    });\n  }\n\n  async removeIssueLabel(\n    owner: string,\n    repo: string,\n    number: number,\n    label: string,\n  ): Promise<void> {\n    await this.request(\n      \"DELETE\",\n      `/repos/${owner}/${repo}/issues/${number}/labels/${encodeURIComponent(label)}`,\n    );\n  }\n\n  async addIssueAssignees(\n    owner: string,\n    repo: string,\n    number: number,\n    assignees: string[],\n  ): Promise<void> {\n    await this.request(\"POST\", `/repos/${owner}/${repo}/issues/${number}/assignees`, {\n      body: { assignees },\n    });\n  }\n\n  async removeIssueAssignees(\n    owner: string,\n    repo: string,\n    number: number,\n    assignees: string[],\n  ): Promise<void> {\n    await this.request(\"DELETE\", `/repos/${owner}/${repo}/issues/${number}/assignees`, {\n      body: { assignees },\n    });\n  }\n\n  async updateIssueState(\n    owner: string,\n    repo: string,\n    number: number,\n    state: \"open\" | \"closed\",\n    stateReason?: string,\n  ): Promise<void> {\n    await this.request(\"PATCH\", `/repos/${owner}/${repo}/issues/${number}`, {\n      body: { state, ...(stateReason ? { state_reason: stateReason } : {}) },\n    });\n  }\n\n  async createIssueComment(\n    owner: string,\n    repo: string,\n    number: number,\n    body: string,\n  ): Promise<GithubIssueComment> {\n    const comment = await this.request<GithubIssueComment>(\n      \"POST\",\n      `/repos/${owner}/${repo}/issues/${number}/comments`,\n      { body: { body } },\n    );\n    return comment!;\n  }\n\n  async updateIssueComment(\n    owner: string,\n    repo: string,\n    commentId: number,\n    body: string,\n  ): Promise<void> {\n    await this.request(\"PATCH\", `/repos/${owner}/${repo}/issues/comments/${commentId}`, {\n      body: { body },\n    });\n  }\n\n  async deleteIssueComment(owner: string, repo: string, commentId: number): Promise<void> {\n    await this.request(\"DELETE\", `/repos/${owner}/${repo}/issues/comments/${commentId}`);\n  }\n\n  async createCommentReaction(\n    owner: string,\n    repo: string,\n    commentId: number,\n    content: GithubReactionContent,\n  ): Promise<void> {\n    await this.request(\"POST\", `/repos/${owner}/${repo}/issues/comments/${commentId}/reactions`, {\n      body: { content },\n    });\n  }\n\n  /**\n   * Reply inside one review thread. GitHub 404s when `commentId` is not a\n   * review comment on PR `number` — server-side same-PR validation for free.\n   */\n  async replyToReviewComment(\n    owner: string,\n    repo: string,\n    number: number,\n    commentId: number,\n    body: string,\n  ): Promise<GithubReviewComment> {\n    const comment = await this.request<GithubReviewComment>(\n      \"POST\",\n      `/repos/${owner}/${repo}/pulls/${number}/comments/${commentId}/replies`,\n      { body: { body } },\n    );\n    return comment!;\n  }\n\n  async createReviewCommentReaction(\n    owner: string,\n    repo: string,\n    commentId: number,\n    content: GithubReactionContent,\n  ): Promise<void> {\n    await this.request(\"POST\", `/repos/${owner}/${repo}/pulls/comments/${commentId}/reactions`, {\n      body: { content },\n    });\n  }\n\n  async createIssueReaction(\n    owner: string,\n    repo: string,\n    number: number,\n    content: GithubReactionContent,\n  ): Promise<void> {\n    await this.request(\"POST\", `/repos/${owner}/${repo}/issues/${number}/reactions`, {\n      body: { content },\n    });\n  }\n}\n"]}

package/dist/adapters/github/cloudbuild.d.ts

@@ -0,0 +1,24 @@
+import type { GcpTokenProvider } from "./gcp-auth.js";
+/** Check runs reported by this app slug are Cloud Build builds. */
+export declare const CLOUD_BUILD_APP_SLUG = "google-cloud-build";
+export declare function isCloudBuildId(value: string): boolean;
+/** GCP project (id or number) from a Cloud Build details_url, or null. */
+export declare function projectFromDetailsUrl(detailsUrl: string | null | undefined): string | null;
+export interface CloudBuildLogOptions {
+    tokenProvider: GcpTokenProvider;
+    project: string;
+    buildId: string;
+    fetchImpl?: typeof fetch;
+}
+export declare class CloudBuildLogUnavailableError extends Error {
+    readonly consoleUrl?: string | undefined;
+    constructor(message: string, consoleUrl?: string | undefined);
+}
+/**
+ * Fetch one build's log text: builds.get → the `log-<id>.txt` object in the
+ * build's logs bucket. Throws CloudBuildLogUnavailableError (with the console
+ * url when known) whenever the log cannot be read — access denied, build not
+ * found, or CLOUD_LOGGING_ONLY builds that write no GCS object.
+ */
+export declare function fetchCloudBuildLog(options: CloudBuildLogOptions): Promise<string>;
+//# sourceMappingURL=cloudbuild.d.ts.map

package/dist/adapters/github/cloudbuild.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudbuild.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/cloudbuild.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAetD,mEAAmE;AACnE,eAAO,MAAM,oBAAoB,uBAAuB,CAAC;AAIzD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,0EAA0E;AAC1E,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAQ1F;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,gBAAgB,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAQD,qBAAa,6BAA8B,SAAQ,KAAK;aAGpC,UAAU,CAAC,EAAE,MAAM;IAFrC,YACE,OAAO,EAAE,MAAM,EACC,UAAU,CAAC,EAAE,MAAM,YAAA,EAIpC;CACF;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyCvF"}

package/dist/adapters/github/cloudbuild.js

@@ -0,0 +1,71 @@
+/**
+ * Host-side Cloud Build log retrieval for `github_checks`. Cloud Build's
+ * GitHub App reports check runs whose `external_id` is the build UUID and
+ * whose `details_url` carries the GCP project; with ADC on the host (e.g. a
+ * WIF external_account file) the build's log object can be read from GCS.
+ *
+ * Required IAM for the ADC principal: roles/cloudbuild.builds.viewer on the
+ * project and roles/storage.objectViewer on the logs bucket.
+ */
+const CLOUDBUILD_API = "https://cloudbuild.googleapis.com/v1";
+const GCS_API = "https://storage.googleapis.com/storage/v1";
+/** Check runs reported by this app slug are Cloud Build builds. */
+export const CLOUD_BUILD_APP_SLUG = "google-cloud-build";
+const BUILD_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+export function isCloudBuildId(value) {
+    return BUILD_ID_PATTERN.test(value);
+}
+/** GCP project (id or number) from a Cloud Build details_url, or null. */
+export function projectFromDetailsUrl(detailsUrl) {
+    if (!detailsUrl)
+        return null;
+    try {
+        const project = new URL(detailsUrl).searchParams.get("project");
+        return project || null;
+    }
+    catch {
+        return null;
+    }
+}
+export class CloudBuildLogUnavailableError extends Error {
+    constructor(message, consoleUrl) {
+        super(message);
+        this.consoleUrl = consoleUrl;
+        this.name = "CloudBuildLogUnavailableError";
+    }
+}
+/**
+ * Fetch one build's log text: builds.get → the `log-<id>.txt` object in the
+ * build's logs bucket. Throws CloudBuildLogUnavailableError (with the console
+ * url when known) whenever the log cannot be read — access denied, build not
+ * found, or CLOUD_LOGGING_ONLY builds that write no GCS object.
+ */
+export async function fetchCloudBuildLog(options) {
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const token = await options.tokenProvider.getAccessToken();
+    const authHeaders = { Authorization: `Bearer ${token}` };
+    const buildResponse = await fetchImpl(`${CLOUDBUILD_API}/projects/${encodeURIComponent(options.project)}/builds/${encodeURIComponent(options.buildId)}`, { headers: authHeaders });
+    if (!buildResponse.ok) {
+        throw new CloudBuildLogUnavailableError(`Cloud Build builds.get failed with ${buildResponse.status} — check that the ADC ` +
+            `principal has roles/cloudbuild.builds.viewer on project ${options.project}.`);
+    }
+    const build = (await buildResponse.json());
+    if (!build.logsBucket) {
+        throw new CloudBuildLogUnavailableError("This build stores logs in Cloud Logging only (no GCS log object); read them in the console.", build.logUrl);
+    }
+    // logsBucket may be spelled gs://bucket or gs://bucket/some/prefix.
+    const bucketPath = build.logsBucket.replace(/^gs:\/\//, "");
+    const [bucket, ...prefixParts] = bucketPath.split("/");
+    const prefix = prefixParts.length > 0 ? `${prefixParts.join("/")}/` : "";
+    const objectName = encodeURIComponent(`${prefix}log-${options.buildId}.txt`);
+    const logResponse = await fetchImpl(`${GCS_API}/b/${bucket}/o/${objectName}?alt=media`, {
+        headers: authHeaders,
+    });
+    if (!logResponse.ok) {
+        throw new CloudBuildLogUnavailableError(`Cloud Build log object gs://${bucket}/${prefix}log-${options.buildId}.txt returned ` +
+            `${logResponse.status} — the ADC principal may lack roles/storage.objectViewer on the ` +
+            `logs bucket, or the build writes logs elsewhere.`, build.logUrl);
+    }
+    return logResponse.text();
+}
+//# sourceMappingURL=cloudbuild.js.map

package/dist/adapters/github/cloudbuild.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudbuild.js","sourceRoot":"","sources":["../../../src/adapters/github/cloudbuild.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AAEH,MAAM,cAAc,GAAG,sCAAsC,CAAC;AAC9D,MAAM,OAAO,GAAG,2CAA2C,CAAC;AAE5D,mEAAmE;AACnE,MAAM,CAAC,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAEzD,MAAM,gBAAgB,GAAG,iEAAiE,CAAC;AAE3F,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,qBAAqB,CAAC,UAAqC;IACzE,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChE,OAAO,OAAO,IAAI,IAAI,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAeD,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,YACE,OAAe,EACC,UAAmB;QAEnC,KAAK,CAAC,OAAO,CAAC,CAAC;0BAFC,UAAU;QAG1B,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA6B;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC;IAC3D,MAAM,WAAW,GAAG,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;IAEzD,MAAM,aAAa,GAAG,MAAM,SAAS,CACnC,GAAG,cAAc,aAAa,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EACjH,EAAE,OAAO,EAAE,WAAW,EAAE,CACzB,CAAC;IACF,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,6BAA6B,CACrC,sCAAsC,aAAa,CAAC,MAAM,wBAAwB;YAChF,2DAA2D,OAAO,CAAC,OAAO,GAAG,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAoB,CAAC;IAE9D,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,IAAI,6BAA6B,CACrC,6FAA6F,EAC7F,KAAK,CAAC,MAAM,CACb,CAAC;IACJ,CAAC;IACD,oEAAoE;IACpE,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC5D,MAAM,CAAC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,MAAM,OAAO,OAAO,CAAC,OAAO,MAAM,CAAC,CAAC;IAE7E,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,MAAM,MAAM,MAAM,UAAU,YAAY,EAAE;QACtF,OAAO,EAAE,WAAW;KACrB,CAAC,CAAC;IACH,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,6BAA6B,CACrC,+BAA+B,MAAM,IAAI,MAAM,OAAO,OAAO,CAAC,OAAO,gBAAgB;YACnF,GAAG,WAAW,CAAC,MAAM,kEAAkE;YACvF,kDAAkD,EACpD,KAAK,CAAC,MAAM,CACb,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC;AAC5B,CAAC","sourcesContent":["import type { GcpTokenProvider } from \"./gcp-auth.js\";\n\n/**\n * Host-side Cloud Build log retrieval for `github_checks`. Cloud Build's\n * GitHub App reports check runs whose `external_id` is the build UUID and\n * whose `details_url` carries the GCP project; with ADC on the host (e.g. a\n * WIF external_account file) the build's log object can be read from GCS.\n *\n * Required IAM for the ADC principal: roles/cloudbuild.builds.viewer on the\n * project and roles/storage.objectViewer on the logs bucket.\n */\n\nconst CLOUDBUILD_API = \"https://cloudbuild.googleapis.com/v1\";\nconst GCS_API = \"https://storage.googleapis.com/storage/v1\";\n\n/** Check runs reported by this app slug are Cloud Build builds. */\nexport const CLOUD_BUILD_APP_SLUG = \"google-cloud-build\";\n\nconst BUILD_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nexport function isCloudBuildId(value: string): boolean {\n  return BUILD_ID_PATTERN.test(value);\n}\n\n/** GCP project (id or number) from a Cloud Build details_url, or null. */\nexport function projectFromDetailsUrl(detailsUrl: string | null | undefined): string | null {\n  if (!detailsUrl) return null;\n  try {\n    const project = new URL(detailsUrl).searchParams.get(\"project\");\n    return project || null;\n  } catch {\n    return null;\n  }\n}\n\nexport interface CloudBuildLogOptions {\n  tokenProvider: GcpTokenProvider;\n  project: string;\n  buildId: string;\n  fetchImpl?: typeof fetch;\n}\n\ninterface CloudBuildBuild {\n  status?: string;\n  logsBucket?: string;\n  logUrl?: string;\n}\n\nexport class CloudBuildLogUnavailableError extends Error {\n  constructor(\n    message: string,\n    public readonly consoleUrl?: string,\n  ) {\n    super(message);\n    this.name = \"CloudBuildLogUnavailableError\";\n  }\n}\n\n/**\n * Fetch one build's log text: builds.get → the `log-<id>.txt` object in the\n * build's logs bucket. Throws CloudBuildLogUnavailableError (with the console\n * url when known) whenever the log cannot be read — access denied, build not\n * found, or CLOUD_LOGGING_ONLY builds that write no GCS object.\n */\nexport async function fetchCloudBuildLog(options: CloudBuildLogOptions): Promise<string> {\n  const fetchImpl = options.fetchImpl ?? fetch;\n  const token = await options.tokenProvider.getAccessToken();\n  const authHeaders = { Authorization: `Bearer ${token}` };\n\n  const buildResponse = await fetchImpl(\n    `${CLOUDBUILD_API}/projects/${encodeURIComponent(options.project)}/builds/${encodeURIComponent(options.buildId)}`,\n    { headers: authHeaders },\n  );\n  if (!buildResponse.ok) {\n    throw new CloudBuildLogUnavailableError(\n      `Cloud Build builds.get failed with ${buildResponse.status} — check that the ADC ` +\n        `principal has roles/cloudbuild.builds.viewer on project ${options.project}.`,\n    );\n  }\n  const build = (await buildResponse.json()) as CloudBuildBuild;\n\n  if (!build.logsBucket) {\n    throw new CloudBuildLogUnavailableError(\n      \"This build stores logs in Cloud Logging only (no GCS log object); read them in the console.\",\n      build.logUrl,\n    );\n  }\n  // logsBucket may be spelled gs://bucket or gs://bucket/some/prefix.\n  const bucketPath = build.logsBucket.replace(/^gs:\\/\\//, \"\");\n  const [bucket, ...prefixParts] = bucketPath.split(\"/\");\n  const prefix = prefixParts.length > 0 ? `${prefixParts.join(\"/\")}/` : \"\";\n  const objectName = encodeURIComponent(`${prefix}log-${options.buildId}.txt`);\n\n  const logResponse = await fetchImpl(`${GCS_API}/b/${bucket}/o/${objectName}?alt=media`, {\n    headers: authHeaders,\n  });\n  if (!logResponse.ok) {\n    throw new CloudBuildLogUnavailableError(\n      `Cloud Build log object gs://${bucket}/${prefix}log-${options.buildId}.txt returned ` +\n        `${logResponse.status} — the ADC principal may lack roles/storage.objectViewer on the ` +\n        `logs bucket, or the build writes logs elsewhere.`,\n      build.logUrl,\n    );\n  }\n  return logResponse.text();\n}\n"]}

package/dist/adapters/github/context.d.ts

@@ -0,0 +1,9 @@
+import type { ConversationMessage, ConversationResponder, MessagingInfo } from "../../adapter.js";
+import { type GithubMessagingBot } from "./bot.js";
+import type { GithubEvent } from "./types.js";
+export declare function createGithubAdapters(event: GithubEvent, bot: GithubMessagingBot): {
+    message: ConversationMessage;
+    responder: ConversationResponder;
+    platform: MessagingInfo;
+};
+//# sourceMappingURL=context.d.ts.map

package/dist/adapters/github/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/adapters/github/context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACd,MAAM,kBAAkB,CAAC;AAU1B,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,UAAU,CAAC;AAElB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAa9C,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,WAAW,EAClB,GAAG,EAAE,kBAAkB,GACtB;IACD,OAAO,EAAE,mBAAmB,CAAC;IAC7B,SAAS,EAAE,qBAAqB,CAAC;IACjC,QAAQ,EAAE,aAAa,CAAC;CACzB,CAgNA"}