@invect/version-control 0.0.1

package/dist/providers/github.cjs

@@ -0,0 +1,191 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let node_crypto = require("node:crypto");
+//#region src/backend/github-provider.ts
+/**
+* Create a GitHub provider instance.
+*
+* Uses the GitHub REST API directly (no Octokit dependency).
+* Supports PAT, GitHub App, and Invect credential-based auth.
+*/
+function githubProvider(options) {
+	let resolvedToken = null;
+	let appTokenExpiresAt = 0;
+	async function getToken() {
+		if (options.auth.type === "token") return options.auth.token;
+		if (options.auth.type === "app") {
+			if (resolvedToken && Date.now() < appTokenExpiresAt - 300 * 1e3) return resolvedToken;
+			const jwt = await createAppJwt(options.auth.appId, options.auth.privateKey);
+			let installationId = options.auth.installationId;
+			if (!installationId) {
+				const res = await fetch("https://api.github.com/app/installations", { headers: {
+					Accept: "application/vnd.github+json",
+					Authorization: `Bearer ${jwt}`
+				} });
+				if (!res.ok) throw new Error(`Failed to list GitHub App installations: ${res.status}`);
+				const installations = await res.json();
+				if (installations.length === 0) throw new Error("GitHub App has no installations. Install the app on a repository first.");
+				installationId = installations[0].id;
+			}
+			const tokenRes = await fetch(`https://api.github.com/app/installations/${installationId}/access_tokens`, {
+				method: "POST",
+				headers: {
+					Accept: "application/vnd.github+json",
+					Authorization: `Bearer ${jwt}`
+				}
+			});
+			if (!tokenRes.ok) throw new Error(`Failed to create installation token: ${tokenRes.status}`);
+			const tokenData = await tokenRes.json();
+			resolvedToken = tokenData.token;
+			appTokenExpiresAt = new Date(tokenData.expires_at).getTime();
+			return resolvedToken;
+		}
+		if (options.auth.type === "credential") throw new Error("GitHub credential-based auth must be resolved during plugin init. Use { type: \"token\" } or { type: \"app\" } for direct configuration.");
+		throw new Error(`Unsupported auth type: ${options.auth.type}`);
+	}
+	/** Create a JWT for GitHub App authentication (RS256, 10-min expiry). */
+	async function createAppJwt(appId, privateKey) {
+		const { createSign } = await import("node:crypto");
+		const now = Math.floor(Date.now() / 1e3);
+		const header = {
+			alg: "RS256",
+			typ: "JWT"
+		};
+		const payload = {
+			iss: appId,
+			iat: now - 60,
+			exp: now + 600
+		};
+		const b64 = (obj) => Buffer.from(JSON.stringify(obj)).toString("base64url");
+		const unsigned = `${b64(header)}.${b64(payload)}`;
+		const sign = createSign("RSA-SHA256");
+		sign.update(unsigned);
+		return `${unsigned}.${sign.sign(privateKey, "base64url")}`;
+	}
+	async function request(method, path, body) {
+		const token = await getToken();
+		const url = `https://api.github.com${path}`;
+		const headers = {
+			Accept: "application/vnd.github+json",
+			Authorization: `Bearer ${token}`,
+			"X-GitHub-Api-Version": "2022-11-28"
+		};
+		if (body) headers["Content-Type"] = "application/json";
+		const response = await fetch(url, {
+			method,
+			headers,
+			body: body ? JSON.stringify(body) : void 0
+		});
+		if (!response.ok && response.status !== 404) {
+			const text = await response.text();
+			throw new Error(`GitHub API error ${response.status}: ${text}`);
+		}
+		const data = response.status === 204 ? void 0 : await response.json();
+		return {
+			status: response.status,
+			data
+		};
+	}
+	function parseRepo(repo) {
+		const [owner, name] = repo.split("/");
+		if (!owner || !name) throw new Error(`Invalid repo format "${repo}". Expected "owner/repo".`);
+		return {
+			owner,
+			repo: name
+		};
+	}
+	return {
+		id: "github",
+		name: "GitHub",
+		async getFileContent(repo, path, ref) {
+			const { owner, repo: name } = parseRepo(repo);
+			const query = ref ? `?ref=${encodeURIComponent(ref)}` : "";
+			const { status, data } = await request("GET", `/repos/${owner}/${name}/contents/${encodeURIComponent(path)}${query}`);
+			if (status === 404) return null;
+			return {
+				content: data.encoding === "base64" ? Buffer.from(data.content, "base64").toString("utf-8") : data.content,
+				sha: data.sha
+			};
+		},
+		async createOrUpdateFile(repo, path, content, message, opts) {
+			const { owner, repo: name } = parseRepo(repo);
+			const body = {
+				message,
+				content: Buffer.from(content).toString("base64"),
+				branch: opts.branch
+			};
+			if (opts.sha) body.sha = opts.sha;
+			const { data } = await request("PUT", `/repos/${owner}/${name}/contents/${encodeURIComponent(path)}`, body);
+			return { commitSha: data.commit.sha };
+		},
+		async deleteFile(repo, path, message, opts) {
+			const { owner, repo: name } = parseRepo(repo);
+			await request("DELETE", `/repos/${owner}/${name}/contents/${encodeURIComponent(path)}`, {
+				message,
+				sha: opts.sha,
+				branch: opts.branch
+			});
+		},
+		async createBranch(repo, branch, fromRef) {
+			const { owner, repo: name } = parseRepo(repo);
+			const { data: refData } = await request("GET", `/repos/${owner}/${name}/git/ref/heads/${encodeURIComponent(fromRef)}`);
+			await request("POST", `/repos/${owner}/${name}/git/refs`, {
+				ref: `refs/heads/${branch}`,
+				sha: refData.object.sha
+			});
+		},
+		async deleteBranch(repo, branch) {
+			const { owner, repo: name } = parseRepo(repo);
+			await request("DELETE", `/repos/${owner}/${name}/git/refs/heads/${encodeURIComponent(branch)}`);
+		},
+		async getBranch(repo, branch) {
+			const { owner, repo: name } = parseRepo(repo);
+			const { status, data } = await request("GET", `/repos/${owner}/${name}/branches/${encodeURIComponent(branch)}`);
+			if (status === 404) return null;
+			return { sha: data.commit.sha };
+		},
+		async createPullRequest(repo, opts) {
+			const { owner, repo: name } = parseRepo(repo);
+			const { data } = await request("POST", `/repos/${owner}/${name}/pulls`, {
+				title: opts.title,
+				body: opts.body,
+				head: opts.head,
+				base: opts.base,
+				draft: opts.draft ?? false
+			});
+			return {
+				number: data.number,
+				url: data.html_url
+			};
+		},
+		async updatePullRequest(repo, number, opts) {
+			const { owner, repo: name } = parseRepo(repo);
+			await request("PATCH", `/repos/${owner}/${name}/pulls/${number}`, opts);
+		},
+		async getPullRequest(repo, number) {
+			const { owner, repo: name } = parseRepo(repo);
+			const { data } = await request("GET", `/repos/${owner}/${name}/pulls/${number}`);
+			let state;
+			if (data.merged) state = "merged";
+			else if (data.state === "closed") state = "closed";
+			else state = "open";
+			return {
+				state,
+				mergedAt: data.merged_at ?? void 0
+			};
+		},
+		async closePullRequest(repo, number, comment) {
+			const { owner, repo: name } = parseRepo(repo);
+			if (comment) await request("POST", `/repos/${owner}/${name}/issues/${number}/comments`, { body: comment });
+			await request("PATCH", `/repos/${owner}/${name}/pulls/${number}`, { state: "closed" });
+		},
+		verifyWebhookSignature(payload, signature, secret) {
+			const expected = `sha256=${(0, node_crypto.createHmac)("sha256", secret).update(payload).digest("hex")}`;
+			if (expected.length !== signature.length) return false;
+			return (0, node_crypto.timingSafeEqual)(Buffer.from(expected), Buffer.from(signature));
+		}
+	};
+}
+//#endregion
+exports.githubProvider = githubProvider;
+
+//# sourceMappingURL=github.cjs.map

package/dist/providers/github.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.cjs","names":[],"sources":["../../src/backend/github-provider.ts"],"sourcesContent":["// =============================================================================\n// GitHub Provider — implements GitProvider using the GitHub REST API (Octokit)\n// =============================================================================\n\nimport { createHmac, timingSafeEqual } from 'node:crypto';\n\nimport type {\n  CreatePullRequestOptions,\n  GitBranchInfo,\n  GitCommitResult,\n  GitFileContent,\n  GitFileUpdateOptions,\n  GitProvider,\n  GitPullRequestInfo,\n  GitPullRequestResult,\n} from './git-provider';\nimport type { GitProviderAuth } from '../shared/types';\n\ninterface GitHubProviderOptions {\n  auth: GitProviderAuth;\n}\n\n/**\n * Create a GitHub provider instance.\n *\n * Uses the GitHub REST API directly (no Octokit dependency).\n * Supports PAT, GitHub App, and Invect credential-based auth.\n */\nexport function githubProvider(options: GitHubProviderOptions): GitProvider {\n  let resolvedToken: string | null = null;\n  let appTokenExpiresAt: number = 0;\n\n  async function getToken(): Promise<string> {\n    // PAT — simple static token\n    if (options.auth.type === 'token') {\n      return options.auth.token;\n    }\n\n    // GitHub App — generate JWT → exchange for installation token\n    if (options.auth.type === 'app') {\n      // Cache: reuse token if not expired (tokens last 1 hour, refresh 5 min early)\n      if (resolvedToken && Date.now() < appTokenExpiresAt - 5 * 60 * 1000) {\n        return resolvedToken;\n      }\n\n      const jwt = await createAppJwt(options.auth.appId, options.auth.privateKey);\n\n      // Find installation ID (if not provided, get it from the App)\n      let installationId = options.auth.installationId;\n      if (!installationId) {\n        const res = await fetch('https://api.github.com/app/installations', {\n          headers: {\n            Accept: 'application/vnd.github+json',\n            Authorization: `Bearer ${jwt}`,\n          },\n        });\n        if (!res.ok) {\n          throw new Error(`Failed to list GitHub App installations: ${res.status}`);\n        }\n        const installations = (await res.json()) as Array<{ id: number }>;\n        if (installations.length === 0) {\n          throw new Error(\n            'GitHub App has no installations. Install the app on a repository first.',\n          );\n        }\n        installationId = installations[0].id;\n      }\n\n      // Exchange JWT for installation access token\n      const tokenRes = await fetch(\n        `https://api.github.com/app/installations/${installationId}/access_tokens`,\n        {\n          method: 'POST',\n          headers: {\n            Accept: 'application/vnd.github+json',\n            Authorization: `Bearer ${jwt}`,\n          },\n        },\n      );\n      if (!tokenRes.ok) {\n        throw new Error(`Failed to create installation token: ${tokenRes.status}`);\n      }\n\n      const tokenData = (await tokenRes.json()) as { token: string; expires_at: string };\n      resolvedToken = tokenData.token;\n      appTokenExpiresAt = new Date(tokenData.expires_at).getTime();\n      return resolvedToken;\n    }\n\n    if (options.auth.type === 'credential') {\n      throw new Error(\n        'GitHub credential-based auth must be resolved during plugin init. ' +\n          'Use { type: \"token\" } or { type: \"app\" } for direct configuration.',\n      );\n    }\n\n    throw new Error(`Unsupported auth type: ${(options.auth as { type: string }).type}`);\n  }\n\n  /** Create a JWT for GitHub App authentication (RS256, 10-min expiry). */\n  async function createAppJwt(appId: string, privateKey: string): Promise<string> {\n    const { createSign } = await import('node:crypto');\n\n    const now = Math.floor(Date.now() / 1000);\n    const header = { alg: 'RS256', typ: 'JWT' };\n    const payload = { iss: appId, iat: now - 60, exp: now + 10 * 60 };\n\n    const b64 = (obj: unknown) => Buffer.from(JSON.stringify(obj)).toString('base64url');\n    const unsigned = `${b64(header)}.${b64(payload)}`;\n\n    const sign = createSign('RSA-SHA256');\n    sign.update(unsigned);\n    const signature = sign.sign(privateKey, 'base64url');\n\n    return `${unsigned}.${signature}`;\n  }\n\n  async function request<T = unknown>(\n    method: string,\n    path: string,\n    body?: unknown,\n  ): Promise<{ status: number; data: T }> {\n    const token = await getToken();\n    const url = `https://api.github.com${path}`;\n\n    const headers: Record<string, string> = {\n      Accept: 'application/vnd.github+json',\n      Authorization: `Bearer ${token}`,\n      'X-GitHub-Api-Version': '2022-11-28',\n    };\n\n    if (body) {\n      headers['Content-Type'] = 'application/json';\n    }\n\n    const response = await fetch(url, {\n      method,\n      headers,\n      body: body ? JSON.stringify(body) : undefined,\n    });\n\n    if (!response.ok && response.status !== 404) {\n      const text = await response.text();\n      throw new Error(`GitHub API error ${response.status}: ${text}`);\n    }\n\n    const data = response.status === 204 ? (undefined as T) : ((await response.json()) as T);\n    return { status: response.status, data };\n  }\n\n  function parseRepo(repo: string): { owner: string; repo: string } {\n    const [owner, name] = repo.split('/');\n    if (!owner || !name) {\n      throw new Error(`Invalid repo format \"${repo}\". Expected \"owner/repo\".`);\n    }\n    return { owner, repo: name };\n  }\n\n  const provider: GitProvider = {\n    id: 'github',\n    name: 'GitHub',\n\n    async getFileContent(repo: string, path: string, ref?: string): Promise<GitFileContent | null> {\n      const { owner, repo: name } = parseRepo(repo);\n      const query = ref ? `?ref=${encodeURIComponent(ref)}` : '';\n      const { status, data } = await request<{\n        content: string;\n        sha: string;\n        encoding: string;\n      }>('GET', `/repos/${owner}/${name}/contents/${encodeURIComponent(path)}${query}`);\n\n      if (status === 404) {\n        return null;\n      }\n\n      const content =\n        data.encoding === 'base64'\n          ? Buffer.from(data.content, 'base64').toString('utf-8')\n          : data.content;\n\n      return { content, sha: data.sha };\n    },\n\n    async createOrUpdateFile(\n      repo: string,\n      path: string,\n      content: string,\n      message: string,\n      opts: GitFileUpdateOptions,\n    ): Promise<GitCommitResult> {\n      const { owner, repo: name } = parseRepo(repo);\n      const body: Record<string, unknown> = {\n        message,\n        content: Buffer.from(content).toString('base64'),\n        branch: opts.branch,\n      };\n      if (opts.sha) {\n        body.sha = opts.sha;\n      }\n\n      const { data } = await request<{ commit: { sha: string } }>(\n        'PUT',\n        `/repos/${owner}/${name}/contents/${encodeURIComponent(path)}`,\n        body,\n      );\n\n      return { commitSha: data.commit.sha };\n    },\n\n    async deleteFile(\n      repo: string,\n      path: string,\n      message: string,\n      opts: { branch: string; sha: string },\n    ): Promise<void> {\n      const { owner, repo: name } = parseRepo(repo);\n      await request('DELETE', `/repos/${owner}/${name}/contents/${encodeURIComponent(path)}`, {\n        message,\n        sha: opts.sha,\n        branch: opts.branch,\n      });\n    },\n\n    async createBranch(repo: string, branch: string, fromRef: string): Promise<void> {\n      const { owner, repo: name } = parseRepo(repo);\n\n      // Resolve fromRef to a SHA\n      const { data: refData } = await request<{ object: { sha: string } }>(\n        'GET',\n        `/repos/${owner}/${name}/git/ref/heads/${encodeURIComponent(fromRef)}`,\n      );\n\n      await request('POST', `/repos/${owner}/${name}/git/refs`, {\n        ref: `refs/heads/${branch}`,\n        sha: refData.object.sha,\n      });\n    },\n\n    async deleteBranch(repo: string, branch: string): Promise<void> {\n      const { owner, repo: name } = parseRepo(repo);\n      await request(\n        'DELETE',\n        `/repos/${owner}/${name}/git/refs/heads/${encodeURIComponent(branch)}`,\n      );\n    },\n\n    async getBranch(repo: string, branch: string): Promise<GitBranchInfo | null> {\n      const { owner, repo: name } = parseRepo(repo);\n      const { status, data } = await request<{ commit: { sha: string } }>(\n        'GET',\n        `/repos/${owner}/${name}/branches/${encodeURIComponent(branch)}`,\n      );\n      if (status === 404) {\n        return null;\n      }\n      return { sha: data.commit.sha };\n    },\n\n    async createPullRequest(\n      repo: string,\n      opts: CreatePullRequestOptions,\n    ): Promise<GitPullRequestResult> {\n      const { owner, repo: name } = parseRepo(repo);\n      const { data } = await request<{ number: number; html_url: string }>(\n        'POST',\n        `/repos/${owner}/${name}/pulls`,\n        {\n          title: opts.title,\n          body: opts.body,\n          head: opts.head,\n          base: opts.base,\n          draft: opts.draft ?? false,\n        },\n      );\n      return { number: data.number, url: data.html_url };\n    },\n\n    async updatePullRequest(\n      repo: string,\n      number: number,\n      opts: { title?: string; body?: string },\n    ): Promise<void> {\n      const { owner, repo: name } = parseRepo(repo);\n      await request('PATCH', `/repos/${owner}/${name}/pulls/${number}`, opts);\n    },\n\n    async getPullRequest(repo: string, number: number): Promise<GitPullRequestInfo> {\n      const { owner, repo: name } = parseRepo(repo);\n      const { data } = await request<{\n        state: string;\n        merged: boolean;\n        merged_at: string | null;\n      }>('GET', `/repos/${owner}/${name}/pulls/${number}`);\n\n      let state: 'open' | 'closed' | 'merged';\n      if (data.merged) {\n        state = 'merged';\n      } else if (data.state === 'closed') {\n        state = 'closed';\n      } else {\n        state = 'open';\n      }\n\n      return { state, mergedAt: data.merged_at ?? undefined };\n    },\n\n    async closePullRequest(repo: string, number: number, comment?: string): Promise<void> {\n      const { owner, repo: name } = parseRepo(repo);\n      if (comment) {\n        await request('POST', `/repos/${owner}/${name}/issues/${number}/comments`, {\n          body: comment,\n        });\n      }\n      await request('PATCH', `/repos/${owner}/${name}/pulls/${number}`, { state: 'closed' });\n    },\n\n    verifyWebhookSignature(payload: string, signature: string, secret: string): boolean {\n      const expected = `sha256=${createHmac('sha256', secret).update(payload).digest('hex')}`;\n      if (expected.length !== signature.length) {\n        return false;\n      }\n      return timingSafeEqual(Buffer.from(expected), Buffer.from(signature));\n    },\n  };\n\n  return provider;\n}\n"],"mappings":";;;;;;;;;AA4BA,SAAgB,eAAe,SAA6C;CAC1E,IAAI,gBAA+B;CACnC,IAAI,oBAA4B;CAEhC,eAAe,WAA4B;AAEzC,MAAI,QAAQ,KAAK,SAAS,QACxB,QAAO,QAAQ,KAAK;AAItB,MAAI,QAAQ,KAAK,SAAS,OAAO;AAE/B,OAAI,iBAAiB,KAAK,KAAK,GAAG,oBAAoB,MAAS,IAC7D,QAAO;GAGT,MAAM,MAAM,MAAM,aAAa,QAAQ,KAAK,OAAO,QAAQ,KAAK,WAAW;GAG3E,IAAI,iBAAiB,QAAQ,KAAK;AAClC,OAAI,CAAC,gBAAgB;IACnB,MAAM,MAAM,MAAM,MAAM,4CAA4C,EAClE,SAAS;KACP,QAAQ;KACR,eAAe,UAAU;KAC1B,EACF,CAAC;AACF,QAAI,CAAC,IAAI,GACP,OAAM,IAAI,MAAM,4CAA4C,IAAI,SAAS;IAE3E,MAAM,gBAAiB,MAAM,IAAI,MAAM;AACvC,QAAI,cAAc,WAAW,EAC3B,OAAM,IAAI,MACR,0EACD;AAEH,qBAAiB,cAAc,GAAG;;GAIpC,MAAM,WAAW,MAAM,MACrB,4CAA4C,eAAe,iBAC3D;IACE,QAAQ;IACR,SAAS;KACP,QAAQ;KACR,eAAe,UAAU;KAC1B;IACF,CACF;AACD,OAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MAAM,wCAAwC,SAAS,SAAS;GAG5E,MAAM,YAAa,MAAM,SAAS,MAAM;AACxC,mBAAgB,UAAU;AAC1B,uBAAoB,IAAI,KAAK,UAAU,WAAW,CAAC,SAAS;AAC5D,UAAO;;AAGT,MAAI,QAAQ,KAAK,SAAS,aACxB,OAAM,IAAI,MACR,2IAED;AAGH,QAAM,IAAI,MAAM,0BAA2B,QAAQ,KAA0B,OAAO;;;CAItF,eAAe,aAAa,OAAe,YAAqC;EAC9E,MAAM,EAAE,eAAe,MAAM,OAAO;EAEpC,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;EACzC,MAAM,SAAS;GAAE,KAAK;GAAS,KAAK;GAAO;EAC3C,MAAM,UAAU;GAAE,KAAK;GAAO,KAAK,MAAM;GAAI,KAAK,MAAM;GAAS;EAEjE,MAAM,OAAO,QAAiB,OAAO,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,YAAY;EACpF,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,QAAQ;EAE/C,MAAM,OAAO,WAAW,aAAa;AACrC,OAAK,OAAO,SAAS;AAGrB,SAAO,GAAG,SAAS,GAFD,KAAK,KAAK,YAAY,YAAY;;CAKtD,eAAe,QACb,QACA,MACA,MACsC;EACtC,MAAM,QAAQ,MAAM,UAAU;EAC9B,MAAM,MAAM,yBAAyB;EAErC,MAAM,UAAkC;GACtC,QAAQ;GACR,eAAe,UAAU;GACzB,wBAAwB;GACzB;AAED,MAAI,KACF,SAAQ,kBAAkB;EAG5B,MAAM,WAAW,MAAM,MAAM,KAAK;GAChC;GACA;GACA,MAAM,OAAO,KAAK,UAAU,KAAK,GAAG,KAAA;GACrC,CAAC;AAEF,MAAI,CAAC,SAAS,MAAM,SAAS,WAAW,KAAK;GAC3C,MAAM,OAAO,MAAM,SAAS,MAAM;AAClC,SAAM,IAAI,MAAM,oBAAoB,SAAS,OAAO,IAAI,OAAO;;EAGjE,MAAM,OAAO,SAAS,WAAW,MAAO,KAAA,IAAoB,MAAM,SAAS,MAAM;AACjF,SAAO;GAAE,QAAQ,SAAS;GAAQ;GAAM;;CAG1C,SAAS,UAAU,MAA+C;EAChE,MAAM,CAAC,OAAO,QAAQ,KAAK,MAAM,IAAI;AACrC,MAAI,CAAC,SAAS,CAAC,KACb,OAAM,IAAI,MAAM,wBAAwB,KAAK,2BAA2B;AAE1E,SAAO;GAAE;GAAO,MAAM;GAAM;;AA0K9B,QAvK8B;EAC5B,IAAI;EACJ,MAAM;EAEN,MAAM,eAAe,MAAc,MAAc,KAA8C;GAC7F,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;GAC7C,MAAM,QAAQ,MAAM,QAAQ,mBAAmB,IAAI,KAAK;GACxD,MAAM,EAAE,QAAQ,SAAS,MAAM,QAI5B,OAAO,UAAU,MAAM,GAAG,KAAK,YAAY,mBAAmB,KAAK,GAAG,QAAQ;AAEjF,OAAI,WAAW,IACb,QAAO;AAQT,UAAO;IAAE,SAJP,KAAK,aAAa,WACd,OAAO,KAAK,KAAK,SAAS,SAAS,CAAC,SAAS,QAAQ,GACrD,KAAK;IAEO,KAAK,KAAK;IAAK;;EAGnC,MAAM,mBACJ,MACA,MACA,SACA,SACA,MAC0B;GAC1B,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;GAC7C,MAAM,OAAgC;IACpC;IACA,SAAS,OAAO,KAAK,QAAQ,CAAC,SAAS,SAAS;IAChD,QAAQ,KAAK;IACd;AACD,OAAI,KAAK,IACP,MAAK,MAAM,KAAK;GAGlB,MAAM,EAAE,SAAS,MAAM,QACrB,OACA,UAAU,MAAM,GAAG,KAAK,YAAY,mBAAmB,KAAK,IAC5D,KACD;AAED,UAAO,EAAE,WAAW,KAAK,OAAO,KAAK;;EAGvC,MAAM,WACJ,MACA,MACA,SACA,MACe;GACf,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;AAC7C,SAAM,QAAQ,UAAU,UAAU,MAAM,GAAG,KAAK,YAAY,mBAAmB,KAAK,IAAI;IACtF;IACA,KAAK,KAAK;IACV,QAAQ,KAAK;IACd,CAAC;;EAGJ,MAAM,aAAa,MAAc,QAAgB,SAAgC;GAC/E,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;GAG7C,MAAM,EAAE,MAAM,YAAY,MAAM,QAC9B,OACA,UAAU,MAAM,GAAG,KAAK,iBAAiB,mBAAmB,QAAQ,GACrE;AAED,SAAM,QAAQ,QAAQ,UAAU,MAAM,GAAG,KAAK,YAAY;IACxD,KAAK,cAAc;IACnB,KAAK,QAAQ,OAAO;IACrB,CAAC;;EAGJ,MAAM,aAAa,MAAc,QAA+B;GAC9D,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;AAC7C,SAAM,QACJ,UACA,UAAU,MAAM,GAAG,KAAK,kBAAkB,mBAAmB,OAAO,GACrE;;EAGH,MAAM,UAAU,MAAc,QAA+C;GAC3E,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;GAC7C,MAAM,EAAE,QAAQ,SAAS,MAAM,QAC7B,OACA,UAAU,MAAM,GAAG,KAAK,YAAY,mBAAmB,OAAO,GAC/D;AACD,OAAI,WAAW,IACb,QAAO;AAET,UAAO,EAAE,KAAK,KAAK,OAAO,KAAK;;EAGjC,MAAM,kBACJ,MACA,MAC+B;GAC/B,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;GAC7C,MAAM,EAAE,SAAS,MAAM,QACrB,QACA,UAAU,MAAM,GAAG,KAAK,SACxB;IACE,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,MAAM,KAAK;IACX,MAAM,KAAK;IACX,OAAO,KAAK,SAAS;IACtB,CACF;AACD,UAAO;IAAE,QAAQ,KAAK;IAAQ,KAAK,KAAK;IAAU;;EAGpD,MAAM,kBACJ,MACA,QACA,MACe;GACf,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;AAC7C,SAAM,QAAQ,SAAS,UAAU,MAAM,GAAG,KAAK,SAAS,UAAU,KAAK;;EAGzE,MAAM,eAAe,MAAc,QAA6C;GAC9E,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;GAC7C,MAAM,EAAE,SAAS,MAAM,QAIpB,OAAO,UAAU,MAAM,GAAG,KAAK,SAAS,SAAS;GAEpD,IAAI;AACJ,OAAI,KAAK,OACP,SAAQ;YACC,KAAK,UAAU,SACxB,SAAQ;OAER,SAAQ;AAGV,UAAO;IAAE;IAAO,UAAU,KAAK,aAAa,KAAA;IAAW;;EAGzD,MAAM,iBAAiB,MAAc,QAAgB,SAAiC;GACpF,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;AAC7C,OAAI,QACF,OAAM,QAAQ,QAAQ,UAAU,MAAM,GAAG,KAAK,UAAU,OAAO,YAAY,EACzE,MAAM,SACP,CAAC;AAEJ,SAAM,QAAQ,SAAS,UAAU,MAAM,GAAG,KAAK,SAAS,UAAU,EAAE,OAAO,UAAU,CAAC;;EAGxF,uBAAuB,SAAiB,WAAmB,QAAyB;GAClF,MAAM,WAAW,WAAA,GAAA,YAAA,YAAqB,UAAU,OAAO,CAAC,OAAO,QAAQ,CAAC,OAAO,MAAM;AACrF,OAAI,SAAS,WAAW,UAAU,OAChC,QAAO;AAET,WAAA,GAAA,YAAA,iBAAuB,OAAO,KAAK,SAAS,EAAE,OAAO,KAAK,UAAU,CAAC;;EAExE"}

package/dist/providers/github.d.cts

@@ -0,0 +1,17 @@
+import { t as GitProvider } from "../git-provider-CjMtpb86.cjs";
+import { n as GitProviderAuth } from "../types-B32wGtx7.cjs";
+
+//#region src/backend/github-provider.d.ts
+interface GitHubProviderOptions {
+  auth: GitProviderAuth;
+}
+/**
+ * Create a GitHub provider instance.
+ *
+ * Uses the GitHub REST API directly (no Octokit dependency).
+ * Supports PAT, GitHub App, and Invect credential-based auth.
+ */
+declare function githubProvider(options: GitHubProviderOptions): GitProvider;
+//#endregion
+export { githubProvider };
+//# sourceMappingURL=github.d.cts.map

package/dist/providers/github.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.cts","names":[],"sources":["../../src/backend/github-provider.ts"],"mappings":";;;;UAkBU,qBAAA;EACR,IAAA,EAAM,eAAA;AAAA;;;;;AASR;;iBAAgB,cAAA,CAAe,OAAA,EAAS,qBAAA,GAAwB,WAAA"}

package/dist/providers/github.d.mts

@@ -0,0 +1,17 @@
+import { t as GitProvider } from "../git-provider-BD8MMEXB.mjs";
+import { n as GitProviderAuth } from "../types-B7fFBAOX.mjs";
+
+//#region src/backend/github-provider.d.ts
+interface GitHubProviderOptions {
+  auth: GitProviderAuth;
+}
+/**
+ * Create a GitHub provider instance.
+ *
+ * Uses the GitHub REST API directly (no Octokit dependency).
+ * Supports PAT, GitHub App, and Invect credential-based auth.
+ */
+declare function githubProvider(options: GitHubProviderOptions): GitProvider;
+//#endregion
+export { githubProvider };
+//# sourceMappingURL=github.d.mts.map

package/dist/providers/github.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.mts","names":[],"sources":["../../src/backend/github-provider.ts"],"mappings":";;;;UAkBU,qBAAA;EACR,IAAA,EAAM,eAAA;AAAA;;;;;AASR;;iBAAgB,cAAA,CAAe,OAAA,EAAS,qBAAA,GAAwB,WAAA"}

package/dist/providers/github.d.ts

@@ -0,0 +1,2 @@
+export { githubProvider } from '../backend/github-provider';
+//# sourceMappingURL=github.d.ts.map

package/dist/providers/github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/providers/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/providers/github.mjs

@@ -0,0 +1,190 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+//#region src/backend/github-provider.ts
+/**
+* Create a GitHub provider instance.
+*
+* Uses the GitHub REST API directly (no Octokit dependency).
+* Supports PAT, GitHub App, and Invect credential-based auth.
+*/
+function githubProvider(options) {
+	let resolvedToken = null;
+	let appTokenExpiresAt = 0;
+	async function getToken() {
+		if (options.auth.type === "token") return options.auth.token;
+		if (options.auth.type === "app") {
+			if (resolvedToken && Date.now() < appTokenExpiresAt - 300 * 1e3) return resolvedToken;
+			const jwt = await createAppJwt(options.auth.appId, options.auth.privateKey);
+			let installationId = options.auth.installationId;
+			if (!installationId) {
+				const res = await fetch("https://api.github.com/app/installations", { headers: {
+					Accept: "application/vnd.github+json",
+					Authorization: `Bearer ${jwt}`
+				} });
+				if (!res.ok) throw new Error(`Failed to list GitHub App installations: ${res.status}`);
+				const installations = await res.json();
+				if (installations.length === 0) throw new Error("GitHub App has no installations. Install the app on a repository first.");
+				installationId = installations[0].id;
+			}
+			const tokenRes = await fetch(`https://api.github.com/app/installations/${installationId}/access_tokens`, {
+				method: "POST",
+				headers: {
+					Accept: "application/vnd.github+json",
+					Authorization: `Bearer ${jwt}`
+				}
+			});
+			if (!tokenRes.ok) throw new Error(`Failed to create installation token: ${tokenRes.status}`);
+			const tokenData = await tokenRes.json();
+			resolvedToken = tokenData.token;
+			appTokenExpiresAt = new Date(tokenData.expires_at).getTime();
+			return resolvedToken;
+		}
+		if (options.auth.type === "credential") throw new Error("GitHub credential-based auth must be resolved during plugin init. Use { type: \"token\" } or { type: \"app\" } for direct configuration.");
+		throw new Error(`Unsupported auth type: ${options.auth.type}`);
+	}
+	/** Create a JWT for GitHub App authentication (RS256, 10-min expiry). */
+	async function createAppJwt(appId, privateKey) {
+		const { createSign } = await import("node:crypto");
+		const now = Math.floor(Date.now() / 1e3);
+		const header = {
+			alg: "RS256",
+			typ: "JWT"
+		};
+		const payload = {
+			iss: appId,
+			iat: now - 60,
+			exp: now + 600
+		};
+		const b64 = (obj) => Buffer.from(JSON.stringify(obj)).toString("base64url");
+		const unsigned = `${b64(header)}.${b64(payload)}`;
+		const sign = createSign("RSA-SHA256");
+		sign.update(unsigned);
+		return `${unsigned}.${sign.sign(privateKey, "base64url")}`;
+	}
+	async function request(method, path, body) {
+		const token = await getToken();
+		const url = `https://api.github.com${path}`;
+		const headers = {
+			Accept: "application/vnd.github+json",
+			Authorization: `Bearer ${token}`,
+			"X-GitHub-Api-Version": "2022-11-28"
+		};
+		if (body) headers["Content-Type"] = "application/json";
+		const response = await fetch(url, {
+			method,
+			headers,
+			body: body ? JSON.stringify(body) : void 0
+		});
+		if (!response.ok && response.status !== 404) {
+			const text = await response.text();
+			throw new Error(`GitHub API error ${response.status}: ${text}`);
+		}
+		const data = response.status === 204 ? void 0 : await response.json();
+		return {
+			status: response.status,
+			data
+		};
+	}
+	function parseRepo(repo) {
+		const [owner, name] = repo.split("/");
+		if (!owner || !name) throw new Error(`Invalid repo format "${repo}". Expected "owner/repo".`);
+		return {
+			owner,
+			repo: name
+		};
+	}
+	return {
+		id: "github",
+		name: "GitHub",
+		async getFileContent(repo, path, ref) {
+			const { owner, repo: name } = parseRepo(repo);
+			const query = ref ? `?ref=${encodeURIComponent(ref)}` : "";
+			const { status, data } = await request("GET", `/repos/${owner}/${name}/contents/${encodeURIComponent(path)}${query}`);
+			if (status === 404) return null;
+			return {
+				content: data.encoding === "base64" ? Buffer.from(data.content, "base64").toString("utf-8") : data.content,
+				sha: data.sha
+			};
+		},
+		async createOrUpdateFile(repo, path, content, message, opts) {
+			const { owner, repo: name } = parseRepo(repo);
+			const body = {
+				message,
+				content: Buffer.from(content).toString("base64"),
+				branch: opts.branch
+			};
+			if (opts.sha) body.sha = opts.sha;
+			const { data } = await request("PUT", `/repos/${owner}/${name}/contents/${encodeURIComponent(path)}`, body);
+			return { commitSha: data.commit.sha };
+		},
+		async deleteFile(repo, path, message, opts) {
+			const { owner, repo: name } = parseRepo(repo);
+			await request("DELETE", `/repos/${owner}/${name}/contents/${encodeURIComponent(path)}`, {
+				message,
+				sha: opts.sha,
+				branch: opts.branch
+			});
+		},
+		async createBranch(repo, branch, fromRef) {
+			const { owner, repo: name } = parseRepo(repo);
+			const { data: refData } = await request("GET", `/repos/${owner}/${name}/git/ref/heads/${encodeURIComponent(fromRef)}`);
+			await request("POST", `/repos/${owner}/${name}/git/refs`, {
+				ref: `refs/heads/${branch}`,
+				sha: refData.object.sha
+			});
+		},
+		async deleteBranch(repo, branch) {
+			const { owner, repo: name } = parseRepo(repo);
+			await request("DELETE", `/repos/${owner}/${name}/git/refs/heads/${encodeURIComponent(branch)}`);
+		},
+		async getBranch(repo, branch) {
+			const { owner, repo: name } = parseRepo(repo);
+			const { status, data } = await request("GET", `/repos/${owner}/${name}/branches/${encodeURIComponent(branch)}`);
+			if (status === 404) return null;
+			return { sha: data.commit.sha };
+		},
+		async createPullRequest(repo, opts) {
+			const { owner, repo: name } = parseRepo(repo);
+			const { data } = await request("POST", `/repos/${owner}/${name}/pulls`, {
+				title: opts.title,
+				body: opts.body,
+				head: opts.head,
+				base: opts.base,
+				draft: opts.draft ?? false
+			});
+			return {
+				number: data.number,
+				url: data.html_url
+			};
+		},
+		async updatePullRequest(repo, number, opts) {
+			const { owner, repo: name } = parseRepo(repo);
+			await request("PATCH", `/repos/${owner}/${name}/pulls/${number}`, opts);
+		},
+		async getPullRequest(repo, number) {
+			const { owner, repo: name } = parseRepo(repo);
+			const { data } = await request("GET", `/repos/${owner}/${name}/pulls/${number}`);
+			let state;
+			if (data.merged) state = "merged";
+			else if (data.state === "closed") state = "closed";
+			else state = "open";
+			return {
+				state,
+				mergedAt: data.merged_at ?? void 0
+			};
+		},
+		async closePullRequest(repo, number, comment) {
+			const { owner, repo: name } = parseRepo(repo);
+			if (comment) await request("POST", `/repos/${owner}/${name}/issues/${number}/comments`, { body: comment });
+			await request("PATCH", `/repos/${owner}/${name}/pulls/${number}`, { state: "closed" });
+		},
+		verifyWebhookSignature(payload, signature, secret) {
+			const expected = `sha256=${createHmac("sha256", secret).update(payload).digest("hex")}`;
+			if (expected.length !== signature.length) return false;
+			return timingSafeEqual(Buffer.from(expected), Buffer.from(signature));
+		}
+	};
+}
+//#endregion
+export { githubProvider };
+
+//# sourceMappingURL=github.mjs.map

package/dist/providers/github.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.mjs","names":[],"sources":["../../src/backend/github-provider.ts"],"sourcesContent":["// =============================================================================\n// GitHub Provider — implements GitProvider using the GitHub REST API (Octokit)\n// =============================================================================\n\nimport { createHmac, timingSafeEqual } from 'node:crypto';\n\nimport type {\n  CreatePullRequestOptions,\n  GitBranchInfo,\n  GitCommitResult,\n  GitFileContent,\n  GitFileUpdateOptions,\n  GitProvider,\n  GitPullRequestInfo,\n  GitPullRequestResult,\n} from './git-provider';\nimport type { GitProviderAuth } from '../shared/types';\n\ninterface GitHubProviderOptions {\n  auth: GitProviderAuth;\n}\n\n/**\n * Create a GitHub provider instance.\n *\n * Uses the GitHub REST API directly (no Octokit dependency).\n * Supports PAT, GitHub App, and Invect credential-based auth.\n */\nexport function githubProvider(options: GitHubProviderOptions): GitProvider {\n  let resolvedToken: string | null = null;\n  let appTokenExpiresAt: number = 0;\n\n  async function getToken(): Promise<string> {\n    // PAT — simple static token\n    if (options.auth.type === 'token') {\n      return options.auth.token;\n    }\n\n    // GitHub App — generate JWT → exchange for installation token\n    if (options.auth.type === 'app') {\n      // Cache: reuse token if not expired (tokens last 1 hour, refresh 5 min early)\n      if (resolvedToken && Date.now() < appTokenExpiresAt - 5 * 60 * 1000) {\n        return resolvedToken;\n      }\n\n      const jwt = await createAppJwt(options.auth.appId, options.auth.privateKey);\n\n      // Find installation ID (if not provided, get it from the App)\n      let installationId = options.auth.installationId;\n      if (!installationId) {\n        const res = await fetch('https://api.github.com/app/installations', {\n          headers: {\n            Accept: 'application/vnd.github+json',\n            Authorization: `Bearer ${jwt}`,\n          },\n        });\n        if (!res.ok) {\n          throw new Error(`Failed to list GitHub App installations: ${res.status}`);\n        }\n        const installations = (await res.json()) as Array<{ id: number }>;\n        if (installations.length === 0) {\n          throw new Error(\n            'GitHub App has no installations. Install the app on a repository first.',\n          );\n        }\n        installationId = installations[0].id;\n      }\n\n      // Exchange JWT for installation access token\n      const tokenRes = await fetch(\n        `https://api.github.com/app/installations/${installationId}/access_tokens`,\n        {\n          method: 'POST',\n          headers: {\n            Accept: 'application/vnd.github+json',\n            Authorization: `Bearer ${jwt}`,\n          },\n        },\n      );\n      if (!tokenRes.ok) {\n        throw new Error(`Failed to create installation token: ${tokenRes.status}`);\n      }\n\n      const tokenData = (await tokenRes.json()) as { token: string; expires_at: string };\n      resolvedToken = tokenData.token;\n      appTokenExpiresAt = new Date(tokenData.expires_at).getTime();\n      return resolvedToken;\n    }\n\n    if (options.auth.type === 'credential') {\n      throw new Error(\n        'GitHub credential-based auth must be resolved during plugin init. ' +\n          'Use { type: \"token\" } or { type: \"app\" } for direct configuration.',\n      );\n    }\n\n    throw new Error(`Unsupported auth type: ${(options.auth as { type: string }).type}`);\n  }\n\n  /** Create a JWT for GitHub App authentication (RS256, 10-min expiry). */\n  async function createAppJwt(appId: string, privateKey: string): Promise<string> {\n    const { createSign } = await import('node:crypto');\n\n    const now = Math.floor(Date.now() / 1000);\n    const header = { alg: 'RS256', typ: 'JWT' };\n    const payload = { iss: appId, iat: now - 60, exp: now + 10 * 60 };\n\n    const b64 = (obj: unknown) => Buffer.from(JSON.stringify(obj)).toString('base64url');\n    const unsigned = `${b64(header)}.${b64(payload)}`;\n\n    const sign = createSign('RSA-SHA256');\n    sign.update(unsigned);\n    const signature = sign.sign(privateKey, 'base64url');\n\n    return `${unsigned}.${signature}`;\n  }\n\n  async function request<T = unknown>(\n    method: string,\n    path: string,\n    body?: unknown,\n  ): Promise<{ status: number; data: T }> {\n    const token = await getToken();\n    const url = `https://api.github.com${path}`;\n\n    const headers: Record<string, string> = {\n      Accept: 'application/vnd.github+json',\n      Authorization: `Bearer ${token}`,\n      'X-GitHub-Api-Version': '2022-11-28',\n    };\n\n    if (body) {\n      headers['Content-Type'] = 'application/json';\n    }\n\n    const response = await fetch(url, {\n      method,\n      headers,\n      body: body ? JSON.stringify(body) : undefined,\n    });\n\n    if (!response.ok && response.status !== 404) {\n      const text = await response.text();\n      throw new Error(`GitHub API error ${response.status}: ${text}`);\n    }\n\n    const data = response.status === 204 ? (undefined as T) : ((await response.json()) as T);\n    return { status: response.status, data };\n  }\n\n  function parseRepo(repo: string): { owner: string; repo: string } {\n    const [owner, name] = repo.split('/');\n    if (!owner || !name) {\n      throw new Error(`Invalid repo format \"${repo}\". Expected \"owner/repo\".`);\n    }\n    return { owner, repo: name };\n  }\n\n  const provider: GitProvider = {\n    id: 'github',\n    name: 'GitHub',\n\n    async getFileContent(repo: string, path: string, ref?: string): Promise<GitFileContent | null> {\n      const { owner, repo: name } = parseRepo(repo);\n      const query = ref ? `?ref=${encodeURIComponent(ref)}` : '';\n      const { status, data } = await request<{\n        content: string;\n        sha: string;\n        encoding: string;\n      }>('GET', `/repos/${owner}/${name}/contents/${encodeURIComponent(path)}${query}`);\n\n      if (status === 404) {\n        return null;\n      }\n\n      const content =\n        data.encoding === 'base64'\n          ? Buffer.from(data.content, 'base64').toString('utf-8')\n          : data.content;\n\n      return { content, sha: data.sha };\n    },\n\n    async createOrUpdateFile(\n      repo: string,\n      path: string,\n      content: string,\n      message: string,\n      opts: GitFileUpdateOptions,\n    ): Promise<GitCommitResult> {\n      const { owner, repo: name } = parseRepo(repo);\n      const body: Record<string, unknown> = {\n        message,\n        content: Buffer.from(content).toString('base64'),\n        branch: opts.branch,\n      };\n      if (opts.sha) {\n        body.sha = opts.sha;\n      }\n\n      const { data } = await request<{ commit: { sha: string } }>(\n        'PUT',\n        `/repos/${owner}/${name}/contents/${encodeURIComponent(path)}`,\n        body,\n      );\n\n      return { commitSha: data.commit.sha };\n    },\n\n    async deleteFile(\n      repo: string,\n      path: string,\n      message: string,\n      opts: { branch: string; sha: string },\n    ): Promise<void> {\n      const { owner, repo: name } = parseRepo(repo);\n      await request('DELETE', `/repos/${owner}/${name}/contents/${encodeURIComponent(path)}`, {\n        message,\n        sha: opts.sha,\n        branch: opts.branch,\n      });\n    },\n\n    async createBranch(repo: string, branch: string, fromRef: string): Promise<void> {\n      const { owner, repo: name } = parseRepo(repo);\n\n      // Resolve fromRef to a SHA\n      const { data: refData } = await request<{ object: { sha: string } }>(\n        'GET',\n        `/repos/${owner}/${name}/git/ref/heads/${encodeURIComponent(fromRef)}`,\n      );\n\n      await request('POST', `/repos/${owner}/${name}/git/refs`, {\n        ref: `refs/heads/${branch}`,\n        sha: refData.object.sha,\n      });\n    },\n\n    async deleteBranch(repo: string, branch: string): Promise<void> {\n      const { owner, repo: name } = parseRepo(repo);\n      await request(\n        'DELETE',\n        `/repos/${owner}/${name}/git/refs/heads/${encodeURIComponent(branch)}`,\n      );\n    },\n\n    async getBranch(repo: string, branch: string): Promise<GitBranchInfo | null> {\n      const { owner, repo: name } = parseRepo(repo);\n      const { status, data } = await request<{ commit: { sha: string } }>(\n        'GET',\n        `/repos/${owner}/${name}/branches/${encodeURIComponent(branch)}`,\n      );\n      if (status === 404) {\n        return null;\n      }\n      return { sha: data.commit.sha };\n    },\n\n    async createPullRequest(\n      repo: string,\n      opts: CreatePullRequestOptions,\n    ): Promise<GitPullRequestResult> {\n      const { owner, repo: name } = parseRepo(repo);\n      const { data } = await request<{ number: number; html_url: string }>(\n        'POST',\n        `/repos/${owner}/${name}/pulls`,\n        {\n          title: opts.title,\n          body: opts.body,\n          head: opts.head,\n          base: opts.base,\n          draft: opts.draft ?? false,\n        },\n      );\n      return { number: data.number, url: data.html_url };\n    },\n\n    async updatePullRequest(\n      repo: string,\n      number: number,\n      opts: { title?: string; body?: string },\n    ): Promise<void> {\n      const { owner, repo: name } = parseRepo(repo);\n      await request('PATCH', `/repos/${owner}/${name}/pulls/${number}`, opts);\n    },\n\n    async getPullRequest(repo: string, number: number): Promise<GitPullRequestInfo> {\n      const { owner, repo: name } = parseRepo(repo);\n      const { data } = await request<{\n        state: string;\n        merged: boolean;\n        merged_at: string | null;\n      }>('GET', `/repos/${owner}/${name}/pulls/${number}`);\n\n      let state: 'open' | 'closed' | 'merged';\n      if (data.merged) {\n        state = 'merged';\n      } else if (data.state === 'closed') {\n        state = 'closed';\n      } else {\n        state = 'open';\n      }\n\n      return { state, mergedAt: data.merged_at ?? undefined };\n    },\n\n    async closePullRequest(repo: string, number: number, comment?: string): Promise<void> {\n      const { owner, repo: name } = parseRepo(repo);\n      if (comment) {\n        await request('POST', `/repos/${owner}/${name}/issues/${number}/comments`, {\n          body: comment,\n        });\n      }\n      await request('PATCH', `/repos/${owner}/${name}/pulls/${number}`, { state: 'closed' });\n    },\n\n    verifyWebhookSignature(payload: string, signature: string, secret: string): boolean {\n      const expected = `sha256=${createHmac('sha256', secret).update(payload).digest('hex')}`;\n      if (expected.length !== signature.length) {\n        return false;\n      }\n      return timingSafeEqual(Buffer.from(expected), Buffer.from(signature));\n    },\n  };\n\n  return provider;\n}\n"],"mappings":";;;;;;;;AA4BA,SAAgB,eAAe,SAA6C;CAC1E,IAAI,gBAA+B;CACnC,IAAI,oBAA4B;CAEhC,eAAe,WAA4B;AAEzC,MAAI,QAAQ,KAAK,SAAS,QACxB,QAAO,QAAQ,KAAK;AAItB,MAAI,QAAQ,KAAK,SAAS,OAAO;AAE/B,OAAI,iBAAiB,KAAK,KAAK,GAAG,oBAAoB,MAAS,IAC7D,QAAO;GAGT,MAAM,MAAM,MAAM,aAAa,QAAQ,KAAK,OAAO,QAAQ,KAAK,WAAW;GAG3E,IAAI,iBAAiB,QAAQ,KAAK;AAClC,OAAI,CAAC,gBAAgB;IACnB,MAAM,MAAM,MAAM,MAAM,4CAA4C,EAClE,SAAS;KACP,QAAQ;KACR,eAAe,UAAU;KAC1B,EACF,CAAC;AACF,QAAI,CAAC,IAAI,GACP,OAAM,IAAI,MAAM,4CAA4C,IAAI,SAAS;IAE3E,MAAM,gBAAiB,MAAM,IAAI,MAAM;AACvC,QAAI,cAAc,WAAW,EAC3B,OAAM,IAAI,MACR,0EACD;AAEH,qBAAiB,cAAc,GAAG;;GAIpC,MAAM,WAAW,MAAM,MACrB,4CAA4C,eAAe,iBAC3D;IACE,QAAQ;IACR,SAAS;KACP,QAAQ;KACR,eAAe,UAAU;KAC1B;IACF,CACF;AACD,OAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MAAM,wCAAwC,SAAS,SAAS;GAG5E,MAAM,YAAa,MAAM,SAAS,MAAM;AACxC,mBAAgB,UAAU;AAC1B,uBAAoB,IAAI,KAAK,UAAU,WAAW,CAAC,SAAS;AAC5D,UAAO;;AAGT,MAAI,QAAQ,KAAK,SAAS,aACxB,OAAM,IAAI,MACR,2IAED;AAGH,QAAM,IAAI,MAAM,0BAA2B,QAAQ,KAA0B,OAAO;;;CAItF,eAAe,aAAa,OAAe,YAAqC;EAC9E,MAAM,EAAE,eAAe,MAAM,OAAO;EAEpC,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;EACzC,MAAM,SAAS;GAAE,KAAK;GAAS,KAAK;GAAO;EAC3C,MAAM,UAAU;GAAE,KAAK;GAAO,KAAK,MAAM;GAAI,KAAK,MAAM;GAAS;EAEjE,MAAM,OAAO,QAAiB,OAAO,KAAK,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,YAAY;EACpF,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,QAAQ;EAE/C,MAAM,OAAO,WAAW,aAAa;AACrC,OAAK,OAAO,SAAS;AAGrB,SAAO,GAAG,SAAS,GAFD,KAAK,KAAK,YAAY,YAAY;;CAKtD,eAAe,QACb,QACA,MACA,MACsC;EACtC,MAAM,QAAQ,MAAM,UAAU;EAC9B,MAAM,MAAM,yBAAyB;EAErC,MAAM,UAAkC;GACtC,QAAQ;GACR,eAAe,UAAU;GACzB,wBAAwB;GACzB;AAED,MAAI,KACF,SAAQ,kBAAkB;EAG5B,MAAM,WAAW,MAAM,MAAM,KAAK;GAChC;GACA;GACA,MAAM,OAAO,KAAK,UAAU,KAAK,GAAG,KAAA;GACrC,CAAC;AAEF,MAAI,CAAC,SAAS,MAAM,SAAS,WAAW,KAAK;GAC3C,MAAM,OAAO,MAAM,SAAS,MAAM;AAClC,SAAM,IAAI,MAAM,oBAAoB,SAAS,OAAO,IAAI,OAAO;;EAGjE,MAAM,OAAO,SAAS,WAAW,MAAO,KAAA,IAAoB,MAAM,SAAS,MAAM;AACjF,SAAO;GAAE,QAAQ,SAAS;GAAQ;GAAM;;CAG1C,SAAS,UAAU,MAA+C;EAChE,MAAM,CAAC,OAAO,QAAQ,KAAK,MAAM,IAAI;AACrC,MAAI,CAAC,SAAS,CAAC,KACb,OAAM,IAAI,MAAM,wBAAwB,KAAK,2BAA2B;AAE1E,SAAO;GAAE;GAAO,MAAM;GAAM;;AA0K9B,QAvK8B;EAC5B,IAAI;EACJ,MAAM;EAEN,MAAM,eAAe,MAAc,MAAc,KAA8C;GAC7F,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;GAC7C,MAAM,QAAQ,MAAM,QAAQ,mBAAmB,IAAI,KAAK;GACxD,MAAM,EAAE,QAAQ,SAAS,MAAM,QAI5B,OAAO,UAAU,MAAM,GAAG,KAAK,YAAY,mBAAmB,KAAK,GAAG,QAAQ;AAEjF,OAAI,WAAW,IACb,QAAO;AAQT,UAAO;IAAE,SAJP,KAAK,aAAa,WACd,OAAO,KAAK,KAAK,SAAS,SAAS,CAAC,SAAS,QAAQ,GACrD,KAAK;IAEO,KAAK,KAAK;IAAK;;EAGnC,MAAM,mBACJ,MACA,MACA,SACA,SACA,MAC0B;GAC1B,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;GAC7C,MAAM,OAAgC;IACpC;IACA,SAAS,OAAO,KAAK,QAAQ,CAAC,SAAS,SAAS;IAChD,QAAQ,KAAK;IACd;AACD,OAAI,KAAK,IACP,MAAK,MAAM,KAAK;GAGlB,MAAM,EAAE,SAAS,MAAM,QACrB,OACA,UAAU,MAAM,GAAG,KAAK,YAAY,mBAAmB,KAAK,IAC5D,KACD;AAED,UAAO,EAAE,WAAW,KAAK,OAAO,KAAK;;EAGvC,MAAM,WACJ,MACA,MACA,SACA,MACe;GACf,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;AAC7C,SAAM,QAAQ,UAAU,UAAU,MAAM,GAAG,KAAK,YAAY,mBAAmB,KAAK,IAAI;IACtF;IACA,KAAK,KAAK;IACV,QAAQ,KAAK;IACd,CAAC;;EAGJ,MAAM,aAAa,MAAc,QAAgB,SAAgC;GAC/E,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;GAG7C,MAAM,EAAE,MAAM,YAAY,MAAM,QAC9B,OACA,UAAU,MAAM,GAAG,KAAK,iBAAiB,mBAAmB,QAAQ,GACrE;AAED,SAAM,QAAQ,QAAQ,UAAU,MAAM,GAAG,KAAK,YAAY;IACxD,KAAK,cAAc;IACnB,KAAK,QAAQ,OAAO;IACrB,CAAC;;EAGJ,MAAM,aAAa,MAAc,QAA+B;GAC9D,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;AAC7C,SAAM,QACJ,UACA,UAAU,MAAM,GAAG,KAAK,kBAAkB,mBAAmB,OAAO,GACrE;;EAGH,MAAM,UAAU,MAAc,QAA+C;GAC3E,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;GAC7C,MAAM,EAAE,QAAQ,SAAS,MAAM,QAC7B,OACA,UAAU,MAAM,GAAG,KAAK,YAAY,mBAAmB,OAAO,GAC/D;AACD,OAAI,WAAW,IACb,QAAO;AAET,UAAO,EAAE,KAAK,KAAK,OAAO,KAAK;;EAGjC,MAAM,kBACJ,MACA,MAC+B;GAC/B,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;GAC7C,MAAM,EAAE,SAAS,MAAM,QACrB,QACA,UAAU,MAAM,GAAG,KAAK,SACxB;IACE,OAAO,KAAK;IACZ,MAAM,KAAK;IACX,MAAM,KAAK;IACX,MAAM,KAAK;IACX,OAAO,KAAK,SAAS;IACtB,CACF;AACD,UAAO;IAAE,QAAQ,KAAK;IAAQ,KAAK,KAAK;IAAU;;EAGpD,MAAM,kBACJ,MACA,QACA,MACe;GACf,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;AAC7C,SAAM,QAAQ,SAAS,UAAU,MAAM,GAAG,KAAK,SAAS,UAAU,KAAK;;EAGzE,MAAM,eAAe,MAAc,QAA6C;GAC9E,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;GAC7C,MAAM,EAAE,SAAS,MAAM,QAIpB,OAAO,UAAU,MAAM,GAAG,KAAK,SAAS,SAAS;GAEpD,IAAI;AACJ,OAAI,KAAK,OACP,SAAQ;YACC,KAAK,UAAU,SACxB,SAAQ;OAER,SAAQ;AAGV,UAAO;IAAE;IAAO,UAAU,KAAK,aAAa,KAAA;IAAW;;EAGzD,MAAM,iBAAiB,MAAc,QAAgB,SAAiC;GACpF,MAAM,EAAE,OAAO,MAAM,SAAS,UAAU,KAAK;AAC7C,OAAI,QACF,OAAM,QAAQ,QAAQ,UAAU,MAAM,GAAG,KAAK,UAAU,OAAO,YAAY,EACzE,MAAM,SACP,CAAC;AAEJ,SAAM,QAAQ,SAAS,UAAU,MAAM,GAAG,KAAK,SAAS,UAAU,EAAE,OAAO,UAAU,CAAC;;EAGxF,uBAAuB,SAAiB,WAAmB,QAAyB;GAClF,MAAM,WAAW,UAAU,WAAW,UAAU,OAAO,CAAC,OAAO,QAAQ,CAAC,OAAO,MAAM;AACrF,OAAI,SAAS,WAAW,UAAU,OAChC,QAAO;AAET,UAAO,gBAAgB,OAAO,KAAK,SAAS,EAAE,OAAO,KAAK,UAAU,CAAC;;EAExE"}

package/dist/shared/types.d.cts

@@ -0,0 +1,2 @@
+import { a as VcSyncConfig, c as VcSyncMode, i as VcSyncAction, l as VcSyncResult, n as GitProviderAuth, o as VcSyncDirection, r as VcFlowSyncStatus, s as VcSyncHistoryRecord, t as ConfigureSyncInput, u as VcSyncStatus } from "../types-B32wGtx7.cjs";
+export { ConfigureSyncInput, GitProviderAuth, VcFlowSyncStatus, VcSyncAction, VcSyncConfig, VcSyncDirection, VcSyncHistoryRecord, VcSyncMode, VcSyncResult, VcSyncStatus };

package/dist/shared/types.d.mts

@@ -0,0 +1,2 @@
+import { a as VcSyncConfig, c as VcSyncMode, i as VcSyncAction, l as VcSyncResult, n as GitProviderAuth, o as VcSyncDirection, r as VcFlowSyncStatus, s as VcSyncHistoryRecord, t as ConfigureSyncInput, u as VcSyncStatus } from "../types-B7fFBAOX.mjs";
+export { ConfigureSyncInput, GitProviderAuth, VcFlowSyncStatus, VcSyncAction, VcSyncConfig, VcSyncDirection, VcSyncHistoryRecord, VcSyncMode, VcSyncResult, VcSyncStatus };

package/dist/shared/types.d.ts

@@ -0,0 +1,77 @@
+/** Supported sync modes */
+export type VcSyncMode = 'direct-commit' | 'pr-per-save' | 'pr-per-publish';
+/** Sync direction */
+export type VcSyncDirection = 'push' | 'pull' | 'bidirectional';
+/** Sync history action types */
+export type VcSyncAction = 'push' | 'pull' | 'pr-created' | 'pr-merged' | 'conflict';
+/** Status of a synced flow */
+export type VcSyncStatus = 'synced' | 'pending' | 'conflict' | 'not-connected' | 'error';
+/** Git provider authentication config */
+export type GitProviderAuth = {
+    type: 'token';
+    token: string;
+} | {
+    type: 'app';
+    appId: string;
+    privateKey: string;
+    installationId?: number;
+} | {
+    type: 'credential';
+    credentialId: string;
+};
+/** Sync config record (mirrors vc_sync_config table) */
+export interface VcSyncConfig {
+    id: string;
+    flowId: string;
+    provider: string;
+    repo: string;
+    branch: string;
+    filePath: string;
+    mode: VcSyncMode;
+    syncDirection: VcSyncDirection;
+    lastSyncedAt: string | null;
+    lastCommitSha: string | null;
+    lastSyncedVersion: number | null;
+    draftBranch: string | null;
+    activePrNumber: number | null;
+    activePrUrl: string | null;
+    enabled: boolean;
+}
+/** Sync history record (mirrors vc_sync_history table) */
+export interface VcSyncHistoryRecord {
+    id: string;
+    flowId: string;
+    action: VcSyncAction;
+    commitSha: string | null;
+    prNumber: number | null;
+    version: number | null;
+    message: string | null;
+    createdAt: string;
+    createdBy: string | null;
+}
+/** Sync status response for a flow */
+export interface VcFlowSyncStatus {
+    flowId: string;
+    status: VcSyncStatus;
+    config: VcSyncConfig | null;
+    lastSync: VcSyncHistoryRecord | null;
+}
+/** Configure sync request body */
+export interface ConfigureSyncInput {
+    repo?: string;
+    branch?: string;
+    filePath?: string;
+    mode?: VcSyncMode;
+    syncDirection?: VcSyncDirection;
+    enabled?: boolean;
+}
+/** Push/pull result */
+export interface VcSyncResult {
+    success: boolean;
+    commitSha?: string;
+    prNumber?: number;
+    prUrl?: string;
+    error?: string;
+    action: VcSyncAction;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/shared/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/shared/types.ts"],"names":[],"mappings":"AAIA,2BAA2B;AAC3B,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAE5E,qBAAqB;AACrB,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,eAAe,CAAC;AAEhE,gCAAgC;AAChC,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,YAAY,GAAG,WAAW,GAAG,UAAU,CAAC;AAErF,8BAA8B;AAC9B,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,eAAe,GAAG,OAAO,CAAC;AAEzF,yCAAyC;AACzC,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,wDAAwD;AACxD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;IACjB,aAAa,EAAE,eAAe,CAAC;IAC/B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,0DAA0D;AAC1D,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,sCAAsC;AACtC,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,YAAY,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACtC;AAED,kCAAkC;AAClC,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,uBAAuB;AACvB,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,CAAC;CACtB"}

package/dist/shared/types.mjs

@@ -0,0 +1 @@
+export {};