@irogane/kaji 0.2.0-beta.11

package/dist/integrations/github.cjs

@@ -0,0 +1,2092 @@
+'use strict';
+
+var kaji = require('@irogane/kaji');
+var integrations = require('@irogane/kaji/integrations');
+var buffer = require('buffer');
+
+// src/integrations/github.ts
+var REPOSITORY = /^[A-Za-z0-9_.-]{1,100}\/[A-Za-z0-9_.-]{1,100}$/;
+var SCOPE_QUALIFIER = /(?:repo|org|user):/i;
+var MAX_SEARCH_RESULT_BYTES = 32 * 1024;
+var MAX_FILE_BYTES = 48 * 1024;
+var MAX_MODEL_RESULT_BYTES = 60 * 1024;
+var MAX_MODEL_TEXT_BYTES = 8 * 1024;
+var MAX_PROVIDER_TEXT_BYTES = 1024 * 1024;
+var MAX_TOKEN_CHARACTERS = 4096;
+var MAX_URL_CHARACTERS = 2048;
+var GENERAL_ACCEPT = "application/vnd.github+json";
+var SEARCH_ACCEPT = "application/vnd.github.text-match+json";
+var GITHUB_API_VERSION = "2026-03-10";
+var GITHUB_CATALOG_VERSION = "0.2.0";
+var GITHUB_USER_AGENT = `kaji-github/${GITHUB_CATALOG_VERSION}`;
+var ProviderShapeError = class extends Error {
+};
+var UnknownMutationError = class extends Error {
+  error_code = "TOOL_EXECUTION_FAILED";
+  reason_code = "github_mutation_unknown";
+  recovery_code = "RECONCILE_GITHUB_MUTATION";
+  doc_url = "https://kaji.dev/docs/integrations/recovery-v1#github-mutation-unknown";
+  constructor() {
+    super("GitHub mutation outcome is unknown");
+    this.name = "UnknownMutationError";
+  }
+};
+function policyError() {
+  return new integrations.IntegrationPolicyError();
+}
+function authError() {
+  return new integrations.IntegrationAuthRequiredError("github_token_missing");
+}
+function apiError() {
+  return new integrations.IntegrationExecutionError("api_rejected");
+}
+function transientError() {
+  return new integrations.IntegrationTransientReadError();
+}
+function rateError() {
+  return new integrations.IntegrationRateLimitedError();
+}
+function requireRepository(value, allowed) {
+  if (typeof value !== "string" || !REPOSITORY.test(value) || !repositoryComponentsAreSafe(value) || !allowed.has(value)) {
+    throw policyError();
+  }
+  return value;
+}
+function repositoryComponentsAreSafe(value) {
+  return value.split("/").every((part) => part !== "." && part !== "..");
+}
+function policyString(value, minimum, maximum) {
+  if (typeof value !== "string") {
+    throw policyError();
+  }
+  assertScalarString(value, policyError);
+  const length = Array.from(value).length;
+  if (length < minimum || length > maximum) throw policyError();
+  return value;
+}
+function policyInteger(value, minimum, maximum) {
+  if (!Number.isSafeInteger(value) || value < minimum || value > maximum) {
+    throw policyError();
+  }
+  return value;
+}
+function providerCharacterString(value, minimum, maximum) {
+  if (typeof value !== "string") {
+    throw new ProviderShapeError();
+  }
+  assertScalarString(value, () => new ProviderShapeError());
+  const length = Array.from(value).length;
+  if (length < minimum || length > maximum) throw new ProviderShapeError();
+  return value;
+}
+function providerGitHubUrl(value, origin, pathSegments) {
+  const raw = providerCharacterString(value, 1, MAX_URL_CHARACTERS);
+  const encodedSegments = pathSegments.map((segment) => {
+    providerCharacterString(segment, 1, MAX_URL_CHARACTERS);
+    if (segment === "." || segment === ".." || segment.includes("\\") || Array.from(segment, (character) => character.charCodeAt(0)).some(
+      (codePoint) => codePoint < 32 || codePoint === 127
+    )) {
+      throw new ProviderShapeError();
+    }
+    return encodeURIComponent(segment).replace(
+      /[!'()*]/g,
+      (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`
+    );
+  });
+  const expected = `${origin}/${encodedSegments.join("/")}`;
+  let parsed;
+  try {
+    parsed = new URL(raw);
+  } catch {
+    throw new ProviderShapeError();
+  }
+  if (raw !== expected || parsed.href !== raw || parsed.protocol !== "https:" || parsed.origin !== origin || parsed.username !== "" || parsed.password !== "" || parsed.port !== "" || parsed.search !== "" || parsed.hash !== "") {
+    throw new ProviderShapeError();
+  }
+  return raw;
+}
+function providerByteString(value, minimum, maximum) {
+  if (typeof value !== "string") {
+    throw new ProviderShapeError();
+  }
+  assertScalarString(value, () => new ProviderShapeError());
+  if (Array.from(value).length < minimum || utf8Size(value) > maximum) {
+    throw new ProviderShapeError();
+  }
+  return value;
+}
+function providerInteger(value, minimum = 0) {
+  if (!Number.isSafeInteger(value) || value < minimum) {
+    throw new ProviderShapeError();
+  }
+  return value;
+}
+function providerBoolean(value) {
+  if (typeof value !== "boolean") throw new ProviderShapeError();
+  return value;
+}
+function providerNullableCharacterString(value, minimum, maximum) {
+  return value === null ? null : providerCharacterString(value, minimum, maximum);
+}
+function providerOptionalNullableCharacterString(value, minimum, maximum) {
+  return value === void 0 || value === null ? null : providerCharacterString(value, minimum, maximum);
+}
+function objectValue(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    throw new ProviderShapeError();
+  }
+  const prototype = Object.getPrototypeOf(value);
+  if (prototype !== Object.prototype && prototype !== null) throw new ProviderShapeError();
+  return value;
+}
+function arrayValue(value) {
+  if (!Array.isArray(value)) throw new ProviderShapeError();
+  return value;
+}
+function assertScalarString(value, makeError) {
+  for (let index = 0; index < value.length; index += 1) {
+    const unit = value.charCodeAt(index);
+    if (unit >= 55296 && unit <= 56319) {
+      const next = value.charCodeAt(index + 1);
+      if (next < 56320 || next > 57343) throw makeError();
+      index += 1;
+    } else if (unit >= 56320 && unit <= 57343) {
+      throw makeError();
+    }
+  }
+}
+function utf8Size(value) {
+  assertScalarString(value, () => new ProviderShapeError());
+  return new TextEncoder().encode(value).byteLength;
+}
+function truncateUtf8(value, maximum) {
+  const bytes = new TextEncoder().encode(value);
+  if (bytes.byteLength <= maximum) return value;
+  for (let end = maximum; end >= Math.max(0, maximum - 3); end -= 1) {
+    try {
+      return new TextDecoder("utf-8", { fatal: true }).decode(bytes.slice(0, end));
+    } catch {
+    }
+  }
+  throw new ProviderShapeError();
+}
+function serializedBytes(value) {
+  return new TextEncoder().encode(JSON.stringify(value)).byteLength;
+}
+function boundedText(value, nullable = false) {
+  if (value === null && nullable) return { text: null, truncated: false };
+  const text = providerByteString(value, 0, MAX_PROVIDER_TEXT_BYTES);
+  const truncated = utf8Size(text) > MAX_MODEL_TEXT_BYTES;
+  return {
+    text: truncated ? truncateUtf8(text, MAX_MODEL_TEXT_BYTES) : text,
+    truncated
+  };
+}
+function valueAtPath(root, path) {
+  let value = root;
+  for (const segment of path) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+      throw new ProviderShapeError();
+    }
+    value = value[segment];
+  }
+  return value;
+}
+function setValueAtPath(root, path, value) {
+  let target = root;
+  for (const segment of path.slice(0, -1)) {
+    const next = target[segment];
+    if (next === null || typeof next !== "object" || Array.isArray(next)) {
+      throw new ProviderShapeError();
+    }
+    target = next;
+  }
+  target[path.at(-1)] = value;
+}
+function shrinkTextFieldsToFit(row, fields, fits) {
+  const candidate = structuredClone(row);
+  if (fits(candidate)) return candidate;
+  for (const field of fields) {
+    const current = valueAtPath(candidate, field.path);
+    if (current === null) continue;
+    if (typeof current !== "string") throw new ProviderShapeError();
+    const byteLength = utf8Size(current);
+    let low = 0;
+    let high = byteLength;
+    let best;
+    while (low <= high) {
+      const middle = Math.floor((low + high) / 2);
+      const text = truncateUtf8(current, middle);
+      const trial = structuredClone(candidate);
+      setValueAtPath(trial, field.path, text);
+      setValueAtPath(trial, field.truncatedPath, true);
+      if (fits(trial)) {
+        best = text;
+        low = middle + 1;
+      } else {
+        high = middle - 1;
+      }
+    }
+    if (best !== void 0) {
+      setValueAtPath(candidate, field.path, best);
+      setValueAtPath(candidate, field.truncatedPath, true);
+      return candidate;
+    }
+    setValueAtPath(candidate, field.path, "");
+    setValueAtPath(candidate, field.truncatedPath, true);
+  }
+  return fits(candidate) ? candidate : void 0;
+}
+function boundedRows(value, maximum = 20) {
+  const rows = arrayValue(value);
+  return {
+    rows: rows.slice(0, maximum),
+    omitted: Math.max(0, rows.length - maximum)
+  };
+}
+function fitRows(rows, build, options = {}) {
+  const items = [];
+  let omitted = options.initialOmitted ?? 0;
+  for (const row of rows) {
+    const fits = (candidate2) => serializedBytes(build([...items, candidate2], omitted)) <= MAX_MODEL_RESULT_BYTES;
+    let candidate = row;
+    if (!fits(candidate)) {
+      if (options.shrink !== void 0) {
+        candidate = options.shrink(candidate, fits);
+      } else if (options.textFields !== void 0) {
+        candidate = shrinkTextFieldsToFit(candidate, options.textFields, fits);
+      }
+    }
+    if (candidate === void 0 || !fits(candidate)) {
+      omitted += 1;
+    } else {
+      items.push(candidate);
+    }
+  }
+  let result = build(items, omitted);
+  while (serializedBytes(result) > MAX_MODEL_RESULT_BYTES && items.length > 0) {
+    items.pop();
+    omitted += 1;
+    result = build(items, omitted);
+  }
+  if (serializedBytes(result) > MAX_MODEL_RESULT_BYTES) throw new ProviderShapeError();
+  return result;
+}
+function assertModelResultBudget(value) {
+  if (serializedBytes(value) > MAX_MODEL_RESULT_BYTES) throw new ProviderShapeError();
+  return value;
+}
+function fitObjectToModelBudget(value, textFields) {
+  return shrinkTextFieldsToFit(
+    value,
+    textFields,
+    (candidate) => serializedBytes(candidate) <= MAX_MODEL_RESULT_BYTES
+  );
+}
+function requireObjectWithinModelBudget(value, textFields) {
+  const fitted = fitObjectToModelBudget(value, textFields);
+  if (fitted === void 0) throw new ProviderShapeError();
+  return fitted;
+}
+function encodeComponent(value) {
+  try {
+    return encodeURIComponent(String(value)).replace(
+      /[!'()*]/g,
+      (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`
+    );
+  } catch {
+    throw policyError();
+  }
+}
+function queryString(query) {
+  if (query === void 0 || Object.keys(query).length === 0) return "";
+  const pairs = [];
+  for (const key of Object.keys(query).sort()) {
+    const value = query[key];
+    if (key.length === 0 || typeof value !== "string" && typeof value !== "number") {
+      throw policyError();
+    }
+    pairs.push(`${encodeComponent(key)}=${encodeComponent(value)}`);
+  }
+  return `?${pairs.join("&")}`;
+}
+function validateContentPath(value) {
+  const path = policyString(value, 1, 512);
+  const parts = path.split("/");
+  if (path.includes("\\") || parts.some((part) => part === "" || part === "." || part === "..")) {
+    throw policyError();
+  }
+  return path;
+}
+function encodeContentPath(value) {
+  return validateContentPath(value).split("/").map(encodeComponent).join("/");
+}
+function validateEncodedContentPath(value) {
+  const decoded = [];
+  for (const part of value.split("/")) {
+    let plain;
+    try {
+      plain = decodeURIComponent(part);
+    } catch {
+      throw policyError();
+    }
+    if (plain === "" || plain === "." || plain === ".." || plain.includes("/") || plain.includes("\\") || encodeComponent(plain) !== part) {
+      throw policyError();
+    }
+    decoded.push(plain);
+  }
+  policyString(decoded.join("/"), 1, 512);
+}
+function encodePathSegment(value, maximum = 100) {
+  const segment = policyString(value, 1, maximum);
+  if (segment === "." || segment === ".." || segment.includes("\\")) throw policyError();
+  return encodeComponent(segment);
+}
+function validateEncodedPathSegment(value, maximum = 100) {
+  let decoded;
+  try {
+    decoded = decodeURIComponent(value);
+  } catch {
+    throw policyError();
+  }
+  if (decoded === "." || decoded === ".." || decoded.includes("\\") || encodeComponent(decoded) !== value) {
+    throw policyError();
+  }
+  policyString(decoded, 1, maximum);
+}
+function validatePage(page, perPage) {
+  policyInteger(page, 1, 1e3);
+  policyInteger(perPage, 1, 20);
+}
+function validateFilter(value) {
+  if (value !== "latest" && value !== "all") throw policyError();
+}
+function validateDeploymentSha(value) {
+  const sha = policyString(value, 1, 64);
+  if (!/^[0-9A-Fa-f]{1,64}$/.test(sha)) throw policyError();
+  return sha;
+}
+function normalizedToken(value) {
+  if (typeof value !== "string" || value.includes("\r") || value.includes("\n")) {
+    throw authError();
+  }
+  const token = value.trim();
+  if (token.length === 0 || Array.from(token).length > MAX_TOKEN_CHARACTERS) throw authError();
+  assertScalarString(token, authError);
+  return token;
+}
+function retryAfter(headers) {
+  const raw = headers["retry-after"];
+  if (raw === void 0) return void 0;
+  const normalized = raw.trim();
+  if (!/^(?:\d+(?:\.\d*)?|\.\d+)(?:[eE][+-]?\d+)?$/.test(normalized)) return void 0;
+  const delaySeconds = Number(normalized);
+  if (!Number.isFinite(delaySeconds) || delaySeconds < 0 || delaySeconds > 2) return void 0;
+  return delaySeconds;
+}
+function isRateLimited(response) {
+  return response.status === 429 || response.status === 403 && (retryAfter(response.headers) !== void 0 || response.headers["x-ratelimit-remaining"] === "0");
+}
+function validateSearchInput(query, page, perPage) {
+  const value = policyString(query, 1, 256);
+  if (SCOPE_QUALIFIER.test(value)) throw policyError();
+  policyInteger(page, 1, 50);
+  policyInteger(perPage, 1, 20);
+  return value;
+}
+function validateListInput(state, page, perPage) {
+  if (state !== "open" && state !== "closed" && state !== "all") throw policyError();
+  validatePage(page, perPage);
+}
+function validateCreateInput(title, body) {
+  policyString(title, 1, 256);
+  const value = policyString(body, 0, 16384);
+  if (new TextEncoder().encode(value).byteLength > 16384) throw policyError();
+}
+function validateCommentBody(body) {
+  const value = policyString(body, 1, 16384);
+  if (new TextEncoder().encode(value).byteLength > 16384) throw policyError();
+}
+function routeFor(options) {
+  const { method, repository: repository2, path, query, body, mutation = false } = options;
+  const prefix = `/repos/${repository2}`;
+  const queryKeys = Object.keys(query ?? {}).sort();
+  const bodyKeys = Object.keys(body ?? {}).sort();
+  if (method === "GET" && !mutation && path === "/search/code") {
+    if (query === void 0 || queryKeys.join(",") !== "page,per_page,q" || body !== void 0) {
+      throw policyError();
+    }
+    const suffix = ` repo:${repository2}`;
+    const value = query.q;
+    if (typeof value !== "string" || !value.endsWith(suffix)) throw policyError();
+    validateSearchInput(value.slice(0, -suffix.length), query.page, query.per_page);
+    return "search_code";
+  }
+  if (method === "GET" && !mutation && path.startsWith(`${prefix}/contents/`)) {
+    if (body !== void 0 || queryKeys.some((key) => key !== "ref")) throw policyError();
+    validateEncodedContentPath(path.slice(`${prefix}/contents/`.length));
+    if (query?.ref !== void 0) policyString(query.ref, 1, 100);
+    return "get_file";
+  }
+  if (path === `${prefix}/issues`) {
+    if (method === "GET" && !mutation) {
+      if (query === void 0 || queryKeys.join(",") !== "page,per_page,state" || body !== void 0) {
+        throw policyError();
+      }
+      validateListInput(query.state, query.page, query.per_page);
+      return "list_issues";
+    }
+    if (method === "POST" && mutation) {
+      if (query !== void 0 || body === void 0 || bodyKeys.join(",") !== "body,title") {
+        throw policyError();
+      }
+      validateCreateInput(body.title, body.body);
+      return "create_issue";
+    }
+  }
+  const escaped = prefix.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  const issue = new RegExp(`^${escaped}/issues/([1-9][0-9]*)$`).exec(path);
+  if (issue !== null && method === "GET" && !mutation && query === void 0 && body === void 0) {
+    policyInteger(Number(issue[1]), 1, Number.MAX_SAFE_INTEGER);
+    return "get_issue";
+  }
+  const comment = new RegExp(`^${escaped}/issues/([1-9][0-9]*)/comments$`).exec(path);
+  if (comment !== null && method === "POST" && mutation && query === void 0) {
+    if (body === void 0 || bodyKeys.join(",") !== "body") throw policyError();
+    policyInteger(Number(comment[1]), 1, Number.MAX_SAFE_INTEGER);
+    validateCommentBody(body.body);
+    return "add_comment";
+  }
+  const commit = new RegExp(`^${escaped}/commits/([^/]+)$`).exec(path);
+  if (commit !== null && method === "GET" && !mutation && body === void 0) {
+    if (query === void 0 || queryKeys.join(",") !== "page,per_page") throw policyError();
+    validateEncodedPathSegment(commit[1]);
+    validatePage(query.page, query.per_page);
+    return "get_commit";
+  }
+  const pull = new RegExp(`^${escaped}/pulls/([1-9][0-9]*)$`).exec(path);
+  if (pull !== null && method === "GET" && !mutation && query === void 0 && body === void 0) {
+    policyInteger(Number(pull[1]), 1, Number.MAX_SAFE_INTEGER);
+    return "get_pull_request";
+  }
+  const pullFiles = new RegExp(`^${escaped}/pulls/([1-9][0-9]*)/files$`).exec(path);
+  if (pullFiles !== null && method === "GET" && !mutation && body === void 0) {
+    if (query === void 0 || queryKeys.join(",") !== "page,per_page") throw policyError();
+    policyInteger(Number(pullFiles[1]), 1, Number.MAX_SAFE_INTEGER);
+    validatePage(query.page, query.per_page);
+    return "list_pull_request_files";
+  }
+  const checks = new RegExp(`^${escaped}/commits/([^/]+)/check-runs$`).exec(path);
+  if (checks !== null && method === "GET" && !mutation && body === void 0) {
+    if (query === void 0 || queryKeys.join(",") !== "filter,page,per_page") {
+      throw policyError();
+    }
+    validateEncodedPathSegment(checks[1]);
+    validateFilter(query.filter);
+    validatePage(query.page, query.per_page);
+    return "list_check_runs";
+  }
+  const workflowRun = new RegExp(`^${escaped}/actions/runs/([1-9][0-9]*)$`).exec(path);
+  if (workflowRun !== null && method === "GET" && !mutation && query === void 0 && body === void 0) {
+    policyInteger(Number(workflowRun[1]), 1, Number.MAX_SAFE_INTEGER);
+    return "get_workflow_run";
+  }
+  const workflowJobs = new RegExp(`^${escaped}/actions/runs/([1-9][0-9]*)/jobs$`).exec(path);
+  if (workflowJobs !== null && method === "GET" && !mutation && body === void 0) {
+    if (query === void 0 || queryKeys.join(",") !== "filter,page,per_page") {
+      throw policyError();
+    }
+    policyInteger(Number(workflowJobs[1]), 1, Number.MAX_SAFE_INTEGER);
+    validateFilter(query.filter);
+    validatePage(query.page, query.per_page);
+    return "list_workflow_jobs";
+  }
+  if (path === `${prefix}/commits` && method === "GET" && !mutation && body === void 0) {
+    if (query === void 0 || queryKeys.join(",") !== "page,path,per_page" && queryKeys.join(",") !== "page,path,per_page,sha") {
+      throw policyError();
+    }
+    validateContentPath(query.path);
+    validatePage(query.page, query.per_page);
+    if (query.sha !== void 0) policyString(query.sha, 1, 100);
+    return "list_file_commits";
+  }
+  const release = new RegExp(`^${escaped}/releases/tags/([^/]+)$`).exec(path);
+  if (release !== null && method === "GET" && !mutation && query === void 0 && body === void 0) {
+    validateEncodedPathSegment(release[1]);
+    return "get_release";
+  }
+  if (path === `${prefix}/deployments` && method === "GET" && !mutation && body === void 0) {
+    if (query === void 0 || !queryKeys.includes("page") || !queryKeys.includes("per_page")) {
+      throw policyError();
+    }
+    if (queryKeys.some(
+      (key) => !["environment", "page", "per_page", "ref", "sha", "task"].includes(key)
+    )) {
+      throw policyError();
+    }
+    validatePage(query.page, query.per_page);
+    for (const key of ["environment", "ref", "task"]) {
+      if (query[key] !== void 0) policyString(query[key], 1, 100);
+    }
+    if (query.sha !== void 0) validateDeploymentSha(query.sha);
+    return "list_deployments";
+  }
+  throw policyError();
+}
+function defaultSleep(delayMs, signal) {
+  if (signal.aborted) return Promise.reject(signal.reason);
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(() => {
+      signal.removeEventListener("abort", onAbort);
+      resolve();
+    }, delayMs);
+    const onAbort = () => {
+      clearTimeout(timer);
+      reject(signal.reason);
+    };
+    signal.addEventListener("abort", onAbort, { once: true });
+  });
+}
+function isAbortOrTimeout(error) {
+  return error instanceof DOMException && (error.name === "AbortError" || error.name === "TimeoutError");
+}
+var GitHubClient = class {
+  repositories;
+  tokenFor;
+  http;
+  sleep;
+  monotonicNow;
+  constructor(options, runtime = { sleep: defaultSleep, monotonicNow: () => performance.now() }) {
+    if (typeof options?.tokenFor !== "function" || !Array.isArray(options.repositories) || typeof options.http?.request !== "function" || typeof runtime.sleep !== "function" || typeof runtime.monotonicNow !== "function") {
+      throw policyError();
+    }
+    const repositories = Object.freeze([...options.repositories]);
+    if (repositories.some(
+      (repository2) => !REPOSITORY.test(repository2) || !repositoryComponentsAreSafe(repository2)
+    )) {
+      throw policyError();
+    }
+    this.repositories = new Set(repositories);
+    this.tokenFor = options.tokenFor;
+    this.http = options.http;
+    this.sleep = runtime.sleep;
+    this.monotonicNow = runtime.monotonicNow;
+  }
+  async searchCode(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const page = input.page ?? 1;
+    const perPage = input.perPage ?? 10;
+    const query = validateSearchInput(input.query, page, perPage);
+    return this.requestJson(context, {
+      method: "GET",
+      repository: repository2,
+      path: "/search/code",
+      query: { q: `${query} repo:${repository2}`, page, per_page: perPage }
+    });
+  }
+  async getFile(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const path = encodeContentPath(input.path);
+    const query = input.ref === void 0 ? void 0 : { ref: policyString(input.ref, 1, 100) };
+    return this.requestJson(context, {
+      method: "GET",
+      repository: repository2,
+      path: `/repos/${repository2}/contents/${path}`,
+      ...query === void 0 ? {} : { query }
+    });
+  }
+  async listIssues(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const state = input.state ?? "open";
+    const page = input.page ?? 1;
+    const perPage = input.perPage ?? 10;
+    validateListInput(state, page, perPage);
+    return this.requestJson(context, {
+      method: "GET",
+      repository: repository2,
+      path: `/repos/${repository2}/issues`,
+      query: { state, page, per_page: perPage }
+    });
+  }
+  async getIssue(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const issueNumber2 = policyInteger(input.issueNumber, 1, Number.MAX_SAFE_INTEGER);
+    return this.requestJson(context, {
+      method: "GET",
+      repository: repository2,
+      path: `/repos/${repository2}/issues/${issueNumber2}`
+    });
+  }
+  async createIssue(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    validateCreateInput(input.title, input.body);
+    return this.requestJson(context, {
+      method: "POST",
+      repository: repository2,
+      path: `/repos/${repository2}/issues`,
+      body: { title: input.title, body: input.body },
+      mutation: true
+    });
+  }
+  async addComment(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const issueNumber2 = policyInteger(input.issueNumber, 1, Number.MAX_SAFE_INTEGER);
+    validateCommentBody(input.body);
+    return this.requestJson(context, {
+      method: "POST",
+      repository: repository2,
+      path: `/repos/${repository2}/issues/${issueNumber2}/comments`,
+      body: { body: input.body },
+      mutation: true
+    });
+  }
+  async getCommit(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const ref = encodePathSegment(input.ref);
+    const page = input.page ?? 1;
+    const perPage = input.perPage ?? 10;
+    validatePage(page, perPage);
+    return this.requestJson(context, {
+      method: "GET",
+      repository: repository2,
+      path: `/repos/${repository2}/commits/${ref}`,
+      query: { page, per_page: perPage }
+    });
+  }
+  async getPullRequest(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const pullNumber = policyInteger(input.pullNumber, 1, Number.MAX_SAFE_INTEGER);
+    return this.requestJson(context, {
+      method: "GET",
+      repository: repository2,
+      path: `/repos/${repository2}/pulls/${pullNumber}`
+    });
+  }
+  async listPullRequestFiles(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const pullNumber = policyInteger(input.pullNumber, 1, Number.MAX_SAFE_INTEGER);
+    const page = input.page ?? 1;
+    const perPage = input.perPage ?? 10;
+    validatePage(page, perPage);
+    return this.requestJson(context, {
+      method: "GET",
+      repository: repository2,
+      path: `/repos/${repository2}/pulls/${pullNumber}/files`,
+      query: { page, per_page: perPage }
+    });
+  }
+  async listCheckRuns(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const ref = encodePathSegment(input.ref);
+    const filter = input.filter ?? "latest";
+    const page = input.page ?? 1;
+    const perPage = input.perPage ?? 10;
+    validateFilter(filter);
+    validatePage(page, perPage);
+    return this.requestJson(context, {
+      method: "GET",
+      repository: repository2,
+      path: `/repos/${repository2}/commits/${ref}/check-runs`,
+      query: { filter, page, per_page: perPage }
+    });
+  }
+  async getWorkflowRun(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const runId = policyInteger(input.runId, 1, Number.MAX_SAFE_INTEGER);
+    return this.requestJson(context, {
+      method: "GET",
+      repository: repository2,
+      path: `/repos/${repository2}/actions/runs/${runId}`
+    });
+  }
+  async listWorkflowJobs(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const runId = policyInteger(input.runId, 1, Number.MAX_SAFE_INTEGER);
+    const filter = input.filter ?? "latest";
+    const page = input.page ?? 1;
+    const perPage = input.perPage ?? 10;
+    validateFilter(filter);
+    validatePage(page, perPage);
+    return this.requestJson(context, {
+      method: "GET",
+      repository: repository2,
+      path: `/repos/${repository2}/actions/runs/${runId}/jobs`,
+      query: { filter, page, per_page: perPage }
+    });
+  }
+  async listFileCommits(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const path = validateContentPath(input.path);
+    const page = input.page ?? 1;
+    const perPage = input.perPage ?? 10;
+    validatePage(page, perPage);
+    const ref = input.ref === void 0 ? void 0 : policyString(input.ref, 1, 100);
+    return this.requestJson(context, {
+      method: "GET",
+      repository: repository2,
+      path: `/repos/${repository2}/commits`,
+      query: { page, path, per_page: perPage, ...ref === void 0 ? {} : { sha: ref } }
+    });
+  }
+  async getRelease(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const tag = encodePathSegment(input.tag);
+    return this.requestJson(context, {
+      method: "GET",
+      repository: repository2,
+      path: `/repos/${repository2}/releases/tags/${tag}`
+    });
+  }
+  async listDeployments(context, input) {
+    const repository2 = requireRepository(input.repository, this.repositories);
+    const page = input.page ?? 1;
+    const perPage = input.perPage ?? 10;
+    validatePage(page, perPage);
+    const ref = input.ref === void 0 ? void 0 : policyString(input.ref, 1, 100);
+    const sha = input.sha === void 0 ? void 0 : validateDeploymentSha(input.sha);
+    const environment = input.environment === void 0 ? void 0 : policyString(input.environment, 1, 100);
+    const task = input.task === void 0 ? void 0 : policyString(input.task, 1, 100);
+    return this.requestJson(context, {
+      method: "GET",
+      repository: repository2,
+      path: `/repos/${repository2}/deployments`,
+      query: {
+        page,
+        per_page: perPage,
+        ...ref === void 0 ? {} : { ref },
+        ...sha === void 0 ? {} : { sha },
+        ...environment === void 0 ? {} : { environment },
+        ...task === void 0 ? {} : { task }
+      }
+    });
+  }
+  async requestJson(context, options) {
+    const repository2 = requireRepository(options.repository, this.repositories);
+    const route = routeFor({ ...options, repository: repository2 });
+    const mutation = options.mutation ?? false;
+    const pathAndQuery = options.path + queryString(options.query);
+    const requestBody = options.body === void 0 ? void 0 : new TextEncoder().encode(JSON.stringify(integrations.snapshotIntegrationResult(options.body)));
+    const identityHeaders = {
+      accept: route === "search_code" ? SEARCH_ACCEPT : GENERAL_ACCEPT,
+      "user-agent": GITHUB_USER_AGENT,
+      "x-github-api-version": GITHUB_API_VERSION
+    };
+    if (context.signal.aborted) throw context.signal.reason;
+    let token;
+    try {
+      token = await this.tokenFor(context);
+    } catch (error) {
+      if (isAbortOrTimeout(error) || error instanceof integrations.IntegrationExecutionError) throw error;
+      throw authError();
+    }
+    if (context.signal.aborted) throw context.signal.reason;
+    const headers = Object.freeze({
+      ...identityHeaders,
+      authorization: `Bearer ${normalizedToken(token)}`,
+      ...requestBody === void 0 ? {} : { "content-type": "application/json" }
+    });
+    let response;
+    for (let attempt = 0; attempt < 2; attempt += 1) {
+      try {
+        response = await this.http.request(
+          pathAndQuery,
+          {
+            method: options.method,
+            headers,
+            ...requestBody === void 0 ? {} : { body: requestBody }
+          },
+          context
+        );
+      } catch (error) {
+        if (isAbortOrTimeout(error) || error instanceof integrations.IntegrationExecutionError) throw error;
+        if (mutation) throw new UnknownMutationError();
+        throw transientError();
+      }
+      if (isRateLimited(response)) {
+        const delay = retryAfter(response.headers);
+        if (options.method === "GET" && attempt === 0 && delay !== void 0 && this.deadlineAllows(context, delay * 1e3)) {
+          await this.sleep(delay * 1e3, context.signal);
+          if (context.signal.aborted) throw context.signal.reason;
+          continue;
+        }
+        throw rateError();
+      }
+      break;
+    }
+    if (response === void 0) throw rateError();
+    if (response.status === 401) throw authError();
+    if (response.status === 403) throw apiError();
+    if (response.status < 200 || response.status >= 300) {
+      if (mutation && response.status >= 500) throw new UnknownMutationError();
+      if (response.status === 404 || response.status === 422 || response.status < 500) {
+        throw apiError();
+      }
+      if (mutation) throw new UnknownMutationError();
+      throw transientError();
+    }
+    try {
+      const decoded = new TextDecoder("utf-8", { fatal: true }).decode(response.bytes);
+      const document = JSON.parse(decoded);
+      return integrations.snapshotIntegrationResult(this.normalize(route, repository2, document, options));
+    } catch {
+      if (mutation) throw new UnknownMutationError();
+      throw transientError();
+    }
+  }
+  deadlineAllows(context, delayMs) {
+    return context.deadlineMonotonicMs === void 0 || context.deadlineMonotonicMs - this.monotonicNow() > delayMs;
+  }
+  normalize(route, repository2, document, options) {
+    if (route === "search_code") return this.normalizeSearch(repository2, document);
+    if (route === "get_file") return this.normalizeFile(document);
+    if (route === "list_issues") return this.normalizeIssueList(document);
+    if (route === "get_issue" || route === "create_issue") return this.normalizeIssue(document);
+    if (route === "add_comment") return this.normalizeComment(document);
+    const page = options.query?.page;
+    const perPage = options.query?.per_page;
+    if (route === "get_commit") return this.normalizeCommit(repository2, document, page, perPage);
+    if (route === "get_pull_request") return this.normalizePullRequest(repository2, document);
+    if (route === "list_pull_request_files") {
+      return this.normalizePullRequestFiles(document, page, perPage);
+    }
+    if (route === "list_check_runs") {
+      return this.normalizeCheckRuns(repository2, document, page, perPage);
+    }
+    if (route === "get_workflow_run") return this.normalizeWorkflowRun(repository2, document);
+    if (route === "list_workflow_jobs") {
+      return this.normalizeWorkflowJobs(
+        repository2,
+        options.path.split("/").at(-2),
+        document,
+        page,
+        perPage
+      );
+    }
+    if (route === "list_file_commits") {
+      return this.normalizeFileCommits(repository2, document, page, perPage);
+    }
+    if (route === "get_release") return this.normalizeRelease(repository2, document);
+    return this.normalizeDeployments(repository2, document, page, perPage);
+  }
+  normalizeSearch(repository2, document) {
+    const root = objectValue(document);
+    const totalCount = providerInteger(root.total_count);
+    const rows = arrayValue(root.items);
+    for (const value of rows) {
+      const item = objectValue(value);
+      if (objectValue(item.repository).full_name !== repository2) throw new ProviderShapeError();
+    }
+    const items = rows.slice(0, 20).map((value) => {
+      const item = objectValue(value);
+      const matches = item.text_matches ?? [];
+      let fragment = "";
+      if (matches !== null) {
+        const matchRows = arrayValue(matches);
+        if (matchRows.length > 0) {
+          fragment = providerByteString(objectValue(matchRows[0]).fragment, 0, 1048576);
+        }
+      }
+      return {
+        path: providerCharacterString(item.path, 1, 512),
+        sha: providerCharacterString(item.sha, 1, 64),
+        fragment: truncateUtf8(fragment, 1024)
+      };
+    });
+    const result = integrations.snapshotIntegrationResult({ total_count: totalCount, items });
+    if (new TextEncoder().encode(JSON.stringify(result)).byteLength > MAX_SEARCH_RESULT_BYTES) {
+      throw new ProviderShapeError();
+    }
+    return result;
+  }
+  normalizeFile(document) {
+    const root = objectValue(document);
+    if (root.type !== "file" || root.encoding !== "base64") throw new ProviderShapeError();
+    const path = providerCharacterString(root.path, 1, 512);
+    const sha = providerCharacterString(root.sha, 1, 64);
+    const size = providerInteger(root.size);
+    const content = providerCharacterString(root.content, 0, 1048576);
+    if (size > MAX_FILE_BYTES) return { path, sha, size, content_omitted: true };
+    const normalized = content.replace(/[\r\n]/g, "");
+    if (!/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(normalized)) {
+      throw new ProviderShapeError();
+    }
+    const decoded = buffer.Buffer.from(normalized, "base64");
+    if (decoded.toString("base64") !== normalized || decoded.byteLength !== size) {
+      throw new ProviderShapeError();
+    }
+    if (decoded.byteLength > MAX_FILE_BYTES) return { path, sha, size, content_omitted: true };
+    const text = new TextDecoder("utf-8", { fatal: true }).decode(decoded);
+    return { path, sha, size, content: text, content_omitted: false };
+  }
+  normalizeIssueList(document) {
+    const items = arrayValue(document).slice(0, 20).map((value) => {
+      const issue = objectValue(value);
+      const body = issue.body === null ? "" : providerByteString(issue.body, 0, 1048576);
+      const state = issue.state;
+      if (state !== "open" && state !== "closed") throw new ProviderShapeError();
+      return {
+        number: providerInteger(issue.number, 1),
+        state,
+        title: providerCharacterString(issue.title, 1, 256),
+        body_preview: truncateUtf8(body, 1024)
+      };
+    });
+    return { items };
+  }
+  normalizeIssue(document) {
+    const issue = objectValue(document);
+    const state = issue.state;
+    if (state !== "open" && state !== "closed") throw new ProviderShapeError();
+    const body = issue.body === null ? "" : providerByteString(issue.body, 0, 16384);
+    if (utf8Size(body) > 16384) throw new ProviderShapeError();
+    return {
+      number: providerInteger(issue.number, 1),
+      state,
+      title: providerCharacterString(issue.title, 1, 256),
+      body,
+      url: providerCharacterString(issue.html_url, 1, MAX_URL_CHARACTERS)
+    };
+  }
+  normalizeComment(document) {
+    const comment = objectValue(document);
+    return {
+      id: providerInteger(comment.id, 1),
+      url: providerCharacterString(comment.html_url, 1, MAX_URL_CHARACTERS)
+    };
+  }
+  normalizeCommit(repository2, document, page, perPage) {
+    const root = objectValue(document);
+    const commit = objectValue(root.commit);
+    const message = boundedText(commit.message);
+    const repositorySegments = repository2.split("/");
+    const authorValue = commit.author;
+    const author = authorValue === null || authorValue === void 0 ? null : (() => {
+      const value = objectValue(authorValue);
+      return {
+        name: providerCharacterString(value.name, 1, 256),
+        date: providerCharacterString(value.date, 1, 100)
+      };
+    })();
+    const statsValue = objectValue(root.stats);
+    const sha = providerCharacterString(root.sha, 1, 64);
+    const base = {
+      sha,
+      url: providerGitHubUrl(root.html_url, "https://github.com", [
+        ...repositorySegments,
+        "commit",
+        sha
+      ]),
+      author,
+      message: message.text,
+      message_truncated: message.truncated,
+      stats: {
+        additions: providerInteger(statsValue.additions),
+        deletions: providerInteger(statsValue.deletions),
+        total: providerInteger(statsValue.total)
+      },
+      page,
+      per_page: perPage
+    };
+    const parentSource = boundedRows(root.parents);
+    const parents = parentSource.rows.map((value) => {
+      const parent = objectValue(value);
+      const parentSha = providerCharacterString(parent.sha, 1, 64);
+      return {
+        sha: parentSha,
+        url: providerGitHubUrl(parent.html_url, "https://github.com", [
+          ...repositorySegments,
+          "commit",
+          parentSha
+        ])
+      };
+    });
+    const fileSource = boundedRows(root.files);
+    const files = fileSource.rows.map((value) => {
+      const file = objectValue(value);
+      return {
+        filename: providerCharacterString(file.filename, 1, 512),
+        status: providerCharacterString(file.status, 1, 100),
+        additions: providerInteger(file.additions),
+        deletions: providerInteger(file.deletions),
+        changes: providerInteger(file.changes)
+      };
+    });
+    const complete = {
+      ...base,
+      parents,
+      parents_omitted_count: parentSource.omitted,
+      files,
+      files_omitted_count: fileSource.omitted
+    };
+    const fittedComplete = fitObjectToModelBudget(complete, [
+      { path: ["message"], truncatedPath: ["message_truncated"] }
+    ]);
+    if (fittedComplete !== void 0) return fittedComplete;
+    const rowFittingBase = { ...base, message: "", message_truncated: true };
+    const parentResult = fitRows(
+      parents,
+      (items, omittedCount) => ({
+        ...rowFittingBase,
+        parents: items,
+        parents_omitted_count: omittedCount,
+        files: [],
+        files_omitted_count: 0
+      }),
+      { initialOmitted: parentSource.omitted }
+    );
+    return fitRows(
+      files,
+      (items, omittedCount) => ({
+        ...rowFittingBase,
+        parents: parentResult.parents,
+        parents_omitted_count: parentResult.parents_omitted_count,
+        files: items,
+        files_omitted_count: omittedCount
+      }),
+      { initialOmitted: fileSource.omitted }
+    );
+  }
+  normalizePullRequest(repository2, document) {
+    const root = objectValue(document);
+    const title = boundedText(root.title);
+    const body = boundedText(root.body ?? null, true);
+    const base = objectValue(root.base);
+    const head = objectValue(root.head);
+    const number = providerInteger(root.number, 1);
+    return requireObjectWithinModelBudget(
+      {
+        number,
+        state: providerCharacterString(root.state, 1, 100),
+        title: title.text,
+        title_truncated: title.truncated,
+        body: body.text,
+        body_truncated: body.truncated,
+        base_sha: providerCharacterString(base.sha, 1, 64),
+        head_sha: providerCharacterString(head.sha, 1, 64),
+        merge_sha: providerNullableCharacterString(root.merge_commit_sha, 1, 64),
+        url: providerGitHubUrl(root.html_url, "https://github.com", [
+          ...repository2.split("/"),
+          "pull",
+          String(number)
+        ])
+      },
+      [
+        { path: ["body"], truncatedPath: ["body_truncated"] },
+        { path: ["title"], truncatedPath: ["title_truncated"] }
+      ]
+    );
+  }
+  normalizePullRequestFiles(document, page, perPage) {
+    const source = boundedRows(document);
+    const rows = source.rows.map((value) => {
+      const root = objectValue(value);
+      const patch = boundedText(root.patch ?? null, true);
+      return {
+        filename: providerCharacterString(root.filename, 1, 512),
+        status: providerCharacterString(root.status, 1, 100),
+        additions: providerInteger(root.additions),
+        deletions: providerInteger(root.deletions),
+        changes: providerInteger(root.changes),
+        patch: patch.text,
+        patch_truncated: patch.truncated
+      };
+    });
+    return fitRows(
+      rows,
+      (items, omittedCount) => ({ items, omitted_count: omittedCount, page, per_page: perPage }),
+      {
+        initialOmitted: source.omitted,
+        textFields: [{ path: ["patch"], truncatedPath: ["patch_truncated"] }]
+      }
+    );
+  }
+  normalizeCheckRuns(repository2, document, page, perPage) {
+    const root = objectValue(document);
+    const totalCount = providerInteger(root.total_count);
+    const source = boundedRows(root.check_runs);
+    const rows = source.rows.map((value) => {
+      const run = objectValue(value);
+      const output = objectValue(run.output);
+      const title = boundedText(output.title ?? null, true);
+      const summary = boundedText(output.summary ?? null, true);
+      const text = boundedText(output.text ?? null, true);
+      const id = providerInteger(run.id, 1);
+      return {
+        id,
+        name: providerCharacterString(run.name, 1, 256),
+        status: providerCharacterString(run.status, 1, 100),
+        conclusion: providerNullableCharacterString(run.conclusion, 1, 100),
+        url: providerGitHubUrl(run.html_url, "https://github.com", [
+          ...repository2.split("/"),
+          "runs",
+          String(id)
+        ]),
+        output: {
+          title: title.text,
+          title_truncated: title.truncated,
+          summary: summary.text,
+          summary_truncated: summary.truncated,
+          text: text.text,
+          text_truncated: text.truncated
+        }
+      };
+    });
+    return fitRows(
+      rows,
+      (items, omittedCount) => ({
+        total_count: totalCount,
+        items,
+        omitted_count: omittedCount,
+        page,
+        per_page: perPage
+      }),
+      {
+        initialOmitted: source.omitted,
+        textFields: [
+          {
+            path: ["output", "title"],
+            truncatedPath: ["output", "title_truncated"]
+          },
+          {
+            path: ["output", "summary"],
+            truncatedPath: ["output", "summary_truncated"]
+          },
+          { path: ["output", "text"], truncatedPath: ["output", "text_truncated"] }
+        ]
+      }
+    );
+  }
+  normalizeWorkflowRun(repository2, document) {
+    const root = objectValue(document);
+    const id = providerInteger(root.id, 1);
+    return assertModelResultBudget({
+      id,
+      workflow: providerCharacterString(root.name, 1, 256),
+      event: providerCharacterString(root.event, 1, 100),
+      status: providerCharacterString(root.status, 1, 100),
+      conclusion: providerNullableCharacterString(root.conclusion, 1, 100),
+      head_sha: providerCharacterString(root.head_sha, 1, 64),
+      attempt: providerInteger(root.run_attempt, 1),
+      url: providerGitHubUrl(root.html_url, "https://github.com", [
+        ...repository2.split("/"),
+        "actions",
+        "runs",
+        String(id)
+      ])
+    });
+  }
+  normalizeWorkflowJobs(repository2, runId, document, page, perPage) {
+    const root = objectValue(document);
+    const totalCount = providerInteger(root.total_count);
+    const source = boundedRows(root.jobs);
+    const rows = source.rows.map((value) => {
+      const job = objectValue(value);
+      const stepSource = job.steps === void 0 || job.steps === null ? { rows: [], omitted: 0 } : boundedRows(job.steps);
+      const steps = stepSource.rows.map((stepValue) => {
+        const step = objectValue(stepValue);
+        return {
+          number: providerInteger(step.number, 1),
+          name: providerCharacterString(step.name, 1, 256),
+          status: providerCharacterString(step.status, 1, 100),
+          conclusion: providerOptionalNullableCharacterString(step.conclusion, 1, 100),
+          started_at: providerOptionalNullableCharacterString(step.started_at, 1, 100),
+          completed_at: providerOptionalNullableCharacterString(step.completed_at, 1, 100)
+        };
+      });
+      const id = providerInteger(job.id, 1);
+      return {
+        id,
+        name: providerCharacterString(job.name, 1, 256),
+        status: providerCharacterString(job.status, 1, 100),
+        conclusion: providerOptionalNullableCharacterString(job.conclusion, 1, 100),
+        started_at: providerOptionalNullableCharacterString(job.started_at, 1, 100),
+        completed_at: providerOptionalNullableCharacterString(job.completed_at, 1, 100),
+        url: providerGitHubUrl(job.html_url, "https://github.com", [
+          ...repository2.split("/"),
+          "actions",
+          "runs",
+          runId,
+          "job",
+          String(id)
+        ]),
+        steps,
+        steps_omitted_count: stepSource.omitted
+      };
+    });
+    return fitRows(
+      rows,
+      (items, omittedCount) => ({
+        total_count: totalCount,
+        items,
+        omitted_count: omittedCount,
+        page,
+        per_page: perPage
+      }),
+      {
+        initialOmitted: source.omitted,
+        shrink: (row, fits) => {
+          const candidate = structuredClone(row);
+          const steps = candidate.steps;
+          while (!fits(candidate) && steps.length > 0) {
+            steps.pop();
+            candidate.steps_omitted_count = candidate.steps_omitted_count + 1;
+          }
+          return fits(candidate) ? candidate : void 0;
+        }
+      }
+    );
+  }
+  normalizeFileCommits(repository2, document, page, perPage) {
+    const source = boundedRows(document);
+    const rows = source.rows.map((value) => {
+      const root = objectValue(value);
+      const commit = objectValue(root.commit);
+      const message = boundedText(commit.message);
+      const authorValue = commit.author;
+      const authorDate = authorValue === null || authorValue === void 0 ? null : providerOptionalNullableCharacterString(objectValue(authorValue).date, 1, 100);
+      const sha = providerCharacterString(root.sha, 1, 64);
+      return {
+        sha,
+        message: message.text,
+        message_truncated: message.truncated,
+        author_date: authorDate,
+        url: providerGitHubUrl(root.html_url, "https://github.com", [
+          ...repository2.split("/"),
+          "commit",
+          sha
+        ])
+      };
+    });
+    return fitRows(
+      rows,
+      (items, omittedCount) => ({ items, omitted_count: omittedCount, page, per_page: perPage }),
+      {
+        initialOmitted: source.omitted,
+        textFields: [{ path: ["message"], truncatedPath: ["message_truncated"] }]
+      }
+    );
+  }
+  normalizeRelease(repository2, document) {
+    const root = objectValue(document);
+    const body = boundedText(root.body ?? null, true);
+    const tag = providerCharacterString(root.tag_name, 1, 100);
+    return requireObjectWithinModelBudget(
+      {
+        tag,
+        target: providerCharacterString(root.target_commitish, 1, 100),
+        draft: providerBoolean(root.draft),
+        prerelease: providerBoolean(root.prerelease),
+        published_at: providerOptionalNullableCharacterString(root.published_at, 1, 100),
+        body: body.text,
+        body_truncated: body.truncated,
+        url: providerGitHubUrl(root.html_url, "https://github.com", [
+          ...repository2.split("/"),
+          "releases",
+          "tag",
+          ...tag.split("/")
+        ])
+      },
+      [{ path: ["body"], truncatedPath: ["body_truncated"] }]
+    );
+  }
+  normalizeDeployments(repository2, document, page, perPage) {
+    const source = boundedRows(document);
+    const rows = source.rows.map((value) => {
+      const root = objectValue(value);
+      const id = providerInteger(root.id, 1);
+      return {
+        id,
+        ref: providerCharacterString(root.ref, 1, 100),
+        sha: providerCharacterString(root.sha, 1, 64),
+        environment: providerCharacterString(root.environment, 1, 100),
+        task: providerCharacterString(root.task, 1, 100),
+        created_at: providerCharacterString(root.created_at, 1, 100),
+        url: providerGitHubUrl(root.url, "https://api.github.com", [
+          "repos",
+          ...repository2.split("/"),
+          "deployments",
+          String(id)
+        ])
+      };
+    });
+    return fitRows(
+      rows,
+      (items, omittedCount) => ({ items, omitted_count: omittedCount, page, per_page: perPage }),
+      { initialOmitted: source.omitted }
+    );
+  }
+};
+
+// registry/github/index.ts
+var repository = {
+  type: "string",
+  pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+};
+var issueNumber = { type: "integer", minimum: 1, maximum: Number.MAX_SAFE_INTEGER };
+function parameters(properties, required) {
+  return {
+    $schema: "https://json-schema.org/draft/2020-12/schema",
+    type: "object",
+    properties,
+    required: [...required],
+    additionalProperties: false
+  };
+}
+function specs() {
+  return [
+    {
+      name: "add_comment",
+      description: "Add a comment to a GitHub issue.",
+      parameters: parameters(
+        {
+          repository,
+          issue_number: issueNumber,
+          body: { type: "string", minLength: 1, maxLength: 16384 }
+        },
+        ["repository", "issue_number", "body"]
+      ),
+      risk: "external_effect",
+      parallel_safe: false,
+      timeout_ms: 15e3
+    },
+    {
+      name: "create_issue",
+      description: "Create a GitHub issue.",
+      parameters: parameters(
+        {
+          repository,
+          title: { type: "string", minLength: 1, maxLength: 256 },
+          body: { type: "string", minLength: 0, maxLength: 16384 }
+        },
+        ["repository", "title", "body"]
+      ),
+      risk: "external_effect",
+      parallel_safe: false,
+      timeout_ms: 15e3
+    },
+    {
+      name: "get_file",
+      description: "Get a file from a GitHub repository.",
+      parameters: parameters(
+        {
+          repository,
+          path: { type: "string", minLength: 1, maxLength: 512 },
+          ref: { type: "string", minLength: 1, maxLength: 100 }
+        },
+        ["repository", "path"]
+      ),
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "get_issue",
+      description: "Get a GitHub issue.",
+      parameters: parameters({ repository, issue_number: issueNumber }, [
+        "repository",
+        "issue_number"
+      ]),
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "list_issues",
+      description: "List GitHub issues.",
+      parameters: parameters(
+        {
+          repository,
+          state: { type: "string", enum: ["open", "closed", "all"], default: "open" },
+          page: { type: "integer", minimum: 1, maximum: 1e3, default: 1 },
+          per_page: { type: "integer", minimum: 1, maximum: 20, default: 10 }
+        },
+        ["repository"]
+      ),
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "search_code",
+      description: "Search code in a GitHub repository.",
+      parameters: parameters(
+        {
+          repository,
+          query: { type: "string", minLength: 1, maxLength: 256 },
+          page: { type: "integer", minimum: 1, maximum: 50, default: 1 },
+          per_page: { type: "integer", minimum: 1, maximum: 20, default: 10 }
+        },
+        ["repository", "query"]
+      ),
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    }
+  ];
+}
+function objectResult(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    throw new Error("GitHub client returned an invalid tool result");
+  }
+  return value;
+}
+function handler(client, name) {
+  return async (args, context) => {
+    switch (name) {
+      case "add_comment":
+        return objectResult(
+          await client.addComment(context, {
+            repository: args.repository,
+            issueNumber: args.issue_number,
+            body: args.body
+          })
+        );
+      case "create_issue":
+        return objectResult(
+          await client.createIssue(context, {
+            repository: args.repository,
+            title: args.title,
+            body: args.body
+          })
+        );
+      case "get_file":
+        return objectResult(
+          await client.getFile(context, {
+            repository: args.repository,
+            path: args.path,
+            ...args.ref === void 0 ? {} : { ref: args.ref }
+          })
+        );
+      case "get_issue":
+        return objectResult(
+          await client.getIssue(context, {
+            repository: args.repository,
+            issueNumber: args.issue_number
+          })
+        );
+      case "list_issues":
+        return objectResult(
+          await client.listIssues(context, {
+            repository: args.repository,
+            ...args.state === void 0 ? {} : { state: args.state },
+            ...args.page === void 0 ? {} : { page: args.page },
+            ...args.per_page === void 0 ? {} : { perPage: args.per_page }
+          })
+        );
+      case "search_code":
+        return objectResult(
+          await client.searchCode(context, {
+            repository: args.repository,
+            query: args.query,
+            ...args.page === void 0 ? {} : { page: args.page },
+            ...args.per_page === void 0 ? {} : { perPage: args.per_page }
+          })
+        );
+      default:
+        throw new Error("Unknown GitHub tool");
+    }
+  };
+}
+function createSharedGitHubToolBindings(client) {
+  return specs().map((spec) => [spec, handler(client, spec.name)]);
+}
+new Proxy(
+  {},
+  {
+    get: () => async () => {
+      throw new Error("inspection dependencies must not execute");
+    }
+  }
+);
+
+// contracts/integrations/github-tool-abi-typescript-v1.json
+var github_tool_abi_typescript_v1_default = {
+  tools: [
+    {
+      name: "add_comment",
+      description: "Add a comment to a GitHub issue.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          issue_number: {
+            type: "integer",
+            minimum: 1,
+            maximum: 9007199254740991
+          },
+          body: { type: "string", minLength: 1, maxLength: 16384 }
+        },
+        required: ["repository", "issue_number", "body"],
+        additionalProperties: false
+      },
+      risk: "external_effect",
+      parallel_safe: false,
+      timeout_ms: 15e3
+    },
+    {
+      name: "create_issue",
+      description: "Create a GitHub issue.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          title: { type: "string", minLength: 1, maxLength: 256 },
+          body: { type: "string", minLength: 0, maxLength: 16384 }
+        },
+        required: ["repository", "title", "body"],
+        additionalProperties: false
+      },
+      risk: "external_effect",
+      parallel_safe: false,
+      timeout_ms: 15e3
+    },
+    {
+      name: "get_file",
+      description: "Get a file from a GitHub repository.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          path: { type: "string", minLength: 1, maxLength: 512 },
+          ref: { type: "string", minLength: 1, maxLength: 100 }
+        },
+        required: ["repository", "path"],
+        additionalProperties: false
+      },
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "get_issue",
+      description: "Get a GitHub issue.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          issue_number: {
+            type: "integer",
+            minimum: 1,
+            maximum: 9007199254740991
+          }
+        },
+        required: ["repository", "issue_number"],
+        additionalProperties: false
+      },
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "list_issues",
+      description: "List GitHub issues.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          state: {
+            type: "string",
+            enum: ["open", "closed", "all"],
+            default: "open"
+          },
+          page: { type: "integer", minimum: 1, maximum: 1e3, default: 1 },
+          per_page: { type: "integer", minimum: 1, maximum: 20, default: 10 }
+        },
+        required: ["repository"],
+        additionalProperties: false
+      },
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "search_code",
+      description: "Search code in a GitHub repository.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          query: { type: "string", minLength: 1, maxLength: 256 },
+          page: { type: "integer", minimum: 1, maximum: 50, default: 1 },
+          per_page: { type: "integer", minimum: 1, maximum: 20, default: 10 }
+        },
+        required: ["repository", "query"],
+        additionalProperties: false
+      },
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "get_commit",
+      description: "Get bounded commit evidence from a GitHub repository.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          ref: { type: "string", minLength: 1, maxLength: 100 },
+          page: { type: "integer", minimum: 1, maximum: 1e3, default: 1 },
+          per_page: { type: "integer", minimum: 1, maximum: 20, default: 10 }
+        },
+        required: ["repository", "ref"],
+        additionalProperties: false
+      },
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "get_pull_request",
+      description: "Get bounded pull request evidence from GitHub.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          pull_number: {
+            type: "integer",
+            minimum: 1,
+            maximum: 9007199254740991
+          }
+        },
+        required: ["repository", "pull_number"],
+        additionalProperties: false
+      },
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "list_pull_request_files",
+      description: "List bounded changed-file evidence for a GitHub pull request.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          pull_number: {
+            type: "integer",
+            minimum: 1,
+            maximum: 9007199254740991
+          },
+          page: { type: "integer", minimum: 1, maximum: 1e3, default: 1 },
+          per_page: { type: "integer", minimum: 1, maximum: 20, default: 10 }
+        },
+        required: ["repository", "pull_number"],
+        additionalProperties: false
+      },
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "list_check_runs",
+      description: "List bounded GitHub check-run evidence for a ref.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          ref: { type: "string", minLength: 1, maxLength: 100 },
+          filter: {
+            type: "string",
+            enum: ["latest", "all"],
+            default: "latest"
+          },
+          page: { type: "integer", minimum: 1, maximum: 1e3, default: 1 },
+          per_page: { type: "integer", minimum: 1, maximum: 20, default: 10 }
+        },
+        required: ["repository", "ref"],
+        additionalProperties: false
+      },
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "get_workflow_run",
+      description: "Get bounded GitHub workflow-run evidence.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          run_id: {
+            type: "integer",
+            minimum: 1,
+            maximum: 9007199254740991
+          }
+        },
+        required: ["repository", "run_id"],
+        additionalProperties: false
+      },
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "list_workflow_jobs",
+      description: "List bounded GitHub workflow-job evidence.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          run_id: {
+            type: "integer",
+            minimum: 1,
+            maximum: 9007199254740991
+          },
+          filter: {
+            type: "string",
+            enum: ["latest", "all"],
+            default: "latest"
+          },
+          page: { type: "integer", minimum: 1, maximum: 1e3, default: 1 },
+          per_page: { type: "integer", minimum: 1, maximum: 20, default: 10 }
+        },
+        required: ["repository", "run_id"],
+        additionalProperties: false
+      },
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "list_file_commits",
+      description: "List bounded GitHub commit history for a file path.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          path: { type: "string", minLength: 1, maxLength: 512 },
+          ref: { type: "string", minLength: 1, maxLength: 100 },
+          page: { type: "integer", minimum: 1, maximum: 1e3, default: 1 },
+          per_page: { type: "integer", minimum: 1, maximum: 20, default: 10 }
+        },
+        required: ["repository", "path"],
+        additionalProperties: false
+      },
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "get_release",
+      description: "Get bounded published-release evidence for a GitHub tag.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          tag: { type: "string", minLength: 1, maxLength: 100 }
+        },
+        required: ["repository", "tag"],
+        additionalProperties: false
+      },
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    },
+    {
+      name: "list_deployments",
+      description: "List bounded GitHub deployment evidence.",
+      parameters: {
+        $schema: "https://json-schema.org/draft/2020-12/schema",
+        type: "object",
+        properties: {
+          repository: {
+            type: "string",
+            pattern: "^[A-Za-z0-9_.-]{1,100}/[A-Za-z0-9_.-]{1,100}$"
+          },
+          ref: { type: "string", minLength: 1, maxLength: 100 },
+          sha: { type: "string", pattern: "^[0-9A-Fa-f]{1,64}$" },
+          environment: { type: "string", minLength: 1, maxLength: 100 },
+          task: { type: "string", minLength: 1, maxLength: 100 },
+          page: { type: "integer", minimum: 1, maximum: 1e3, default: 1 },
+          per_page: { type: "integer", minimum: 1, maximum: 20, default: 10 }
+        },
+        required: ["repository"],
+        additionalProperties: false
+      },
+      risk: "read",
+      parallel_safe: true,
+      timeout_ms: 1e4
+    }
+  ]
+};
+
+// registry/github/package-tools.ts
+function objectResult2(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    throw new Error("GitHub client returned an invalid tool result");
+  }
+  return value;
+}
+function extensionSpecs() {
+  return github_tool_abi_typescript_v1_default.tools.slice(6).map((tool) => ({
+    name: tool.name,
+    description: tool.description,
+    parameters: tool.parameters,
+    risk: "read",
+    parallel_safe: true,
+    timeout_ms: 1e4
+  }));
+}
+function extensionHandler(client, name) {
+  return async (args, context) => {
+    switch (name) {
+      case "get_commit":
+        return objectResult2(
+          await client.getCommit(context, {
+            repository: args.repository,
+            ref: args.ref,
+            ...args.page === void 0 ? {} : { page: args.page },
+            ...args.per_page === void 0 ? {} : { perPage: args.per_page }
+          })
+        );
+      case "get_pull_request":
+        return objectResult2(
+          await client.getPullRequest(context, {
+            repository: args.repository,
+            pullNumber: args.pull_number
+          })
+        );
+      case "list_pull_request_files":
+        return objectResult2(
+          await client.listPullRequestFiles(context, {
+            repository: args.repository,
+            pullNumber: args.pull_number,
+            ...args.page === void 0 ? {} : { page: args.page },
+            ...args.per_page === void 0 ? {} : { perPage: args.per_page }
+          })
+        );
+      case "list_check_runs":
+        return objectResult2(
+          await client.listCheckRuns(context, {
+            repository: args.repository,
+            ref: args.ref,
+            ...args.filter === void 0 ? {} : { filter: args.filter },
+            ...args.page === void 0 ? {} : { page: args.page },
+            ...args.per_page === void 0 ? {} : { perPage: args.per_page }
+          })
+        );
+      case "get_workflow_run":
+        return objectResult2(
+          await client.getWorkflowRun(context, {
+            repository: args.repository,
+            runId: args.run_id
+          })
+        );
+      case "list_workflow_jobs":
+        return objectResult2(
+          await client.listWorkflowJobs(context, {
+            repository: args.repository,
+            runId: args.run_id,
+            ...args.filter === void 0 ? {} : { filter: args.filter },
+            ...args.page === void 0 ? {} : { page: args.page },
+            ...args.per_page === void 0 ? {} : { perPage: args.per_page }
+          })
+        );
+      case "list_file_commits":
+        return objectResult2(
+          await client.listFileCommits(context, {
+            repository: args.repository,
+            path: args.path,
+            ...args.ref === void 0 ? {} : { ref: args.ref },
+            ...args.page === void 0 ? {} : { page: args.page },
+            ...args.per_page === void 0 ? {} : { perPage: args.per_page }
+          })
+        );
+      case "get_release":
+        return objectResult2(
+          await client.getRelease(context, {
+            repository: args.repository,
+            tag: args.tag
+          })
+        );
+      case "list_deployments":
+        return objectResult2(
+          await client.listDeployments(context, {
+            repository: args.repository,
+            ...args.ref === void 0 ? {} : { ref: args.ref },
+            ...args.sha === void 0 ? {} : { sha: args.sha },
+            ...args.environment === void 0 ? {} : { environment: args.environment },
+            ...args.task === void 0 ? {} : { task: args.task },
+            ...args.page === void 0 ? {} : { page: args.page },
+            ...args.per_page === void 0 ? {} : { perPage: args.per_page }
+          })
+        );
+      default:
+        throw new Error("Unknown GitHub package tool");
+    }
+  };
+}
+function createPackageGitHubToolBindings(client) {
+  return extensionSpecs().map((spec) => [spec, extensionHandler(client, spec.name)]);
+}
+var productionRuntime = {
+  createRequester: (observability) => integrations.createGitHubRequester(observability),
+  createClient: (options) => new GitHubClient(options)
+};
+function createPackageGitHubState(options, runtime = productionRuntime) {
+  const { metricsSink, traceSink, tokenFor, ...clientOptions } = options;
+  const metrics = metricsSink ?? kaji.NOOP_METRICS;
+  const trace = traceSink ?? kaji.NOOP_TRACE;
+  const instrumentedTokenFor = async (context) => {
+    const started = performance.now();
+    const span = kaji.startSpan(trace, "kaji.integration.auth", {
+      "session.id": context.sessionId,
+      "turn.id": context.turnId,
+      "request.id": context.requestId,
+      "trace.id": context.traceId,
+      "tool.call_id": context.toolCallId,
+      "integration.name": "github",
+      "integration.operation": "token",
+      "http.status_family": "none"
+    });
+    let outcome = "error";
+    try {
+      const token = await tokenFor(context);
+      outcome = "success";
+      return token;
+    } catch (error) {
+      if (error instanceof DOMException && error.name === "AbortError") outcome = "cancelled";
+      span.recordError(error);
+      throw error;
+    } finally {
+      kaji.recordMetric(metrics, "kaji.integration.auth_ms", Math.max(0, performance.now() - started), {
+        integration: "github",
+        operation: "token",
+        outcome
+      });
+      span.end();
+    }
+  };
+  const requester = runtime.createRequester({ metricsSink, traceSink });
+  try {
+    return {
+      client: runtime.createClient({
+        ...clientOptions,
+        tokenFor: instrumentedTokenFor,
+        http: requester
+      }),
+      close: () => requester.close()
+    };
+  } catch (error) {
+    try {
+      requester.close();
+    } catch {
+    }
+    throw error;
+  }
+}
+
+// src/integrations/github.ts
+var GitHubIntegration = class extends kaji.Integration {
+  namespace = "github";
+  #client;
+  #closeOwnedRequester;
+  #toolExposure;
+  #closed = false;
+  constructor(options) {
+    super();
+    if (options.toolExposure !== void 0 && options.toolExposure !== "read-only" && options.toolExposure !== "all") {
+      throw new TypeError('GitHub toolExposure must be "all" or "read-only"');
+    }
+    this.#toolExposure = options.toolExposure ?? "all";
+    const state = createPackageGitHubState(options);
+    this.#client = state.client;
+    this.#closeOwnedRequester = state.close;
+  }
+  tools() {
+    const bindings = [
+      ...createSharedGitHubToolBindings(this.#client),
+      ...createPackageGitHubToolBindings(this.#client)
+    ];
+    const exposed = this.#toolExposure === "read-only" ? bindings.filter(([spec]) => spec.risk === "read") : bindings;
+    return exposed.map(([spec, handler2]) => [
+      spec,
+      async (args, context) => {
+        if (this.#closed) throw new integrations.IntegrationPolicyError();
+        return handler2(args, context);
+      }
+    ]);
+  }
+  close() {
+    const close = this.#closeOwnedRequester;
+    if (close === void 0) return;
+    close();
+    this.#closeOwnedRequester = void 0;
+    this.#closed = true;
+  }
+};
+function createGithubIntegration(options) {
+  return new GitHubIntegration(options);
+}
+function inspectIntegration() {
+  const integration = createGithubIntegration({
+    tokenFor: async () => {
+      throw new Error("inspection dependencies must not execute");
+    },
+    repositories: []
+  });
+  integration.close();
+  return integration;
+}
+
+exports.GitHubIntegration = GitHubIntegration;
+exports.createGithubIntegration = createGithubIntegration;
+exports.inspectIntegration = inspectIntegration;
+//# sourceMappingURL=github.cjs.map
+//# sourceMappingURL=github.cjs.map