@paklo/core 0.4.0 → 0.6.0

package/dist/azure/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","names":["path","reason: string | undefined","reviewers: IdentityRefWithVote[]","body: string | undefined","configPath: undefined | string","configContents: undefined | string","organisation: string","path"],"sources":["../../src/azure/types.ts","../../src/azure/models.ts","../../src/azure/utils.ts","../../src/azure/client.ts","../../src/azure/config.ts","../../src/azure/url-parts.ts"],"sourcesContent":["export enum VersionControlChangeType {\n  None = 0,\n  Add = 1,\n  Edit = 2,\n  Encoding = 4,\n  Rename = 8,\n  Delete = 16,\n  Undelete = 32,\n  Branch = 64,\n  Merge = 128,\n  Lock = 256,\n  Rollback = 512,\n  SourceRename = 1024,\n  TargetRename = 2048,\n  Property = 4096,\n  All = 8191,\n}\n\nexport enum GitPullRequestMergeStrategy {\n  NoFastForward = 1,\n  Squash = 2,\n  Rebase = 3,\n  RebaseMerge = 4,\n}\n\nexport enum CommentThreadStatus {\n  Unknown = 0,\n  Active = 1,\n  Fixed = 2,\n  WontFix = 3,\n  Closed = 4,\n  ByDesign = 5,\n  Pending = 6,\n}\nexport enum CommentType {\n  Unknown = 0,\n  Text = 1,\n  CodeChange = 2,\n  System = 3,\n}\nexport enum ItemContentType {\n  RawText = 0,\n  Base64Encoded = 1,\n}\nexport enum PullRequestAsyncStatus {\n  NotSet = 0,\n  Queued = 1,\n  Conflicts = 2,\n  Succeeded = 3,\n  RejectedByPolicy = 4,\n  Failure = 5,\n}\nexport enum PullRequestStatus {\n  NotSet = 0,\n  Active = 1,\n  Abandoned = 2,\n  Completed = 3,\n  All = 4,\n}\nexport interface IdentityRefWithVote {\n  id?: string;\n  displayName?: string;\n  uniqueName?: string;\n  url?: string;\n  imageUrl?: string;\n  vote?: number;\n  hasDeclined?: boolean;\n  isFlagged?: boolean;\n  isRequired?: boolean;\n}\n","import type { GitPullRequestMergeStrategy, VersionControlChangeType } from './types';\n\n/**\n * Pull request property names used to store metadata about the pull request.\n * https://learn.microsoft.com/en-us/rest/api/azure/devops/git/pull-request-properties\n */\nexport const DEVOPS_PR_PROPERTY_MICROSOFT_GIT_SOURCE_REF_NAME = 'Microsoft.Git.PullRequest.SourceRefName';\nexport const DEVOPS_PR_PROPERTY_DEPENDABOT_PACKAGE_MANAGER = 'Dependabot.PackageManager';\nexport const DEVOPS_PR_PROPERTY_DEPENDABOT_DEPENDENCIES = 'Dependabot.Dependencies';\n\n/**\n * File change\n */\nexport interface IFileChange {\n  changeType: VersionControlChangeType;\n  path: string;\n  content: string;\n  encoding: string;\n}\n\n/**\n * Pull request properties\n */\nexport interface IPullRequestProperties {\n  id: number;\n  properties?: {\n    name: string;\n    value: string;\n  }[];\n}\n\n/**\n * Pull request creation request\n */\nexport interface ICreatePullRequest {\n  project: string;\n  repository: string;\n  source: {\n    commit: string;\n    branch: string;\n  };\n  target: {\n    branch: string;\n  };\n  author?: {\n    email: string;\n    name: string;\n  };\n  title: string;\n  description: string;\n  commitMessage: string;\n  autoComplete?: {\n    ignorePolicyConfigIds?: number[];\n    mergeStrategy?: GitPullRequestMergeStrategy;\n  };\n  assignees?: string[];\n  labels?: string[];\n  workItems?: string[];\n  changes: IFileChange[];\n  properties?: {\n    name: string;\n    value: string;\n  }[];\n}\n\n/**\n * Pull request update request\n */\nexport interface IUpdatePullRequest {\n  project: string;\n  repository: string;\n  pullRequestId: number;\n  commit: string;\n  author?: {\n    email: string;\n    name: string;\n  };\n  changes: IFileChange[];\n  skipIfDraft?: boolean;\n  skipIfCommitsFromAuthorsOtherThan?: string;\n  skipIfNotBehindTargetBranch?: boolean;\n}\n\n/**\n * Pull request approval request\n */\nexport interface IApprovePullRequest {\n  project: string;\n  repository: string;\n  pullRequestId: number;\n}\n\n/**\n * Pull request abandon request\n */\nexport interface IAbandonPullRequest {\n  project: string;\n  repository: string;\n  pullRequestId: number;\n  comment?: string;\n  deleteSourceBranch?: boolean;\n}\n","import * as path from 'node:path';\n\nimport {\n  type DependabotClosePullRequest,\n  type DependabotCreatePullRequest,\n  type DependabotDependency,\n  type DependabotExistingGroupPR,\n  DependabotExistingGroupPRSchema,\n  type DependabotExistingPR,\n  DependabotExistingPRSchema,\n  type DependabotUpdatePullRequest,\n} from '@/dependabot';\nimport {\n  DEVOPS_PR_PROPERTY_DEPENDABOT_DEPENDENCIES,\n  DEVOPS_PR_PROPERTY_DEPENDABOT_PACKAGE_MANAGER,\n  type IFileChange,\n  type IPullRequestProperties,\n} from './models';\nimport { VersionControlChangeType } from './types';\n\nexport function normalizeFilePath(path: string): string {\n  // Convert backslashes to forward slashes, convert './' => '/' and ensure the path starts with a forward slash if it doesn't already, this is how DevOps paths are formatted\n  return path\n    ?.replace(/\\\\/g, '/')\n    ?.replace(/^\\.\\//, '/')\n    ?.replace(/^([^/])/, '/$1');\n}\n\nexport function normalizeBranchName(branch?: string): string | undefined {\n  // Strip the 'refs/heads/' prefix from the branch name, if present\n  return branch?.replace(/^refs\\/heads\\//i, '');\n}\n\nexport const DependenciesPrPropertySchema = DependabotExistingPRSchema.array().or(DependabotExistingGroupPRSchema);\n\nexport function buildPullRequestProperties(\n  packageManager: string,\n  dependencies: DependabotExistingPR[] | DependabotExistingGroupPR,\n) {\n  return [\n    {\n      name: DEVOPS_PR_PROPERTY_DEPENDABOT_PACKAGE_MANAGER,\n      value: packageManager,\n    },\n    {\n      name: DEVOPS_PR_PROPERTY_DEPENDABOT_DEPENDENCIES,\n      value: JSON.stringify(dependencies),\n    },\n  ];\n}\n\nexport function parsePullRequestProperties(\n  pullRequests: IPullRequestProperties[],\n  packageManager: string | null,\n): Record<string, DependabotExistingPR[] | DependabotExistingGroupPR> {\n  return Object.fromEntries(\n    pullRequests\n      .filter((pr) => {\n        return pr.properties?.find(\n          (p) =>\n            p.name === DEVOPS_PR_PROPERTY_DEPENDABOT_PACKAGE_MANAGER &&\n            (packageManager === null || p.value === packageManager),\n        );\n      })\n      .map((pr) => {\n        return [\n          pr.id,\n          DependenciesPrPropertySchema.parse(\n            JSON.parse(pr.properties!.find((p) => p.name === DEVOPS_PR_PROPERTY_DEPENDABOT_DEPENDENCIES)!.value),\n          ),\n        ];\n      }),\n  );\n}\n\nexport function getPullRequestForDependencyNames(\n  existingPullRequests: IPullRequestProperties[],\n  packageManager: string,\n  dependencyNames: string[],\n): IPullRequestProperties | undefined {\n  return existingPullRequests.find((pr) => {\n    return (\n      pr.properties?.find(\n        (p) => p.name === DEVOPS_PR_PROPERTY_DEPENDABOT_PACKAGE_MANAGER && p.value === packageManager,\n      ) &&\n      pr.properties?.find(\n        (p) =>\n          p.name === DEVOPS_PR_PROPERTY_DEPENDABOT_DEPENDENCIES &&\n          areEqual(getDependencyNames(DependenciesPrPropertySchema.parse(JSON.parse(p.value))), dependencyNames),\n      )\n    );\n  });\n}\n\nfunction getDependencyNames(dependencies: DependabotExistingPR[] | DependabotExistingGroupPR): string[] {\n  const deps = Array.isArray(dependencies) ? dependencies : dependencies.dependencies;\n  return deps.map((dep) => dep['dependency-name']?.toString());\n}\n\nfunction areEqual(a: string[], b: string[]): boolean {\n  if (a.length !== b.length) return false;\n  return a.every((name) => b.includes(name));\n}\n\nexport function getPullRequestChangedFilesForOutputData(\n  data: DependabotCreatePullRequest | DependabotUpdatePullRequest,\n): IFileChange[] {\n  return data['updated-dependency-files']\n    .filter((file) => file.type === 'file')\n    .map((file) => {\n      let changeType = VersionControlChangeType.None;\n      if (file.deleted === true) {\n        changeType = VersionControlChangeType.Delete;\n      } else if (file.operation === 'update') {\n        changeType = VersionControlChangeType.Edit;\n      } else {\n        changeType = VersionControlChangeType.Add;\n      }\n      return {\n        changeType: changeType,\n        path: path.join(file.directory, file.name),\n        content: file.content,\n        encoding: file.content_encoding ?? 'utf8',\n      } satisfies IFileChange;\n    });\n}\n\nexport function getPullRequestCloseReasonForOutputData(data: DependabotClosePullRequest): string | undefined {\n  // The first dependency is the \"lead\" dependency in a multi-dependency update\n  const leadDependencyName = data['dependency-names'][0];\n  let reason: string | undefined;\n  switch (data.reason) {\n    case 'dependencies_changed':\n      reason = `Looks like the dependencies have changed`;\n      break;\n    case 'dependency_group_empty':\n      reason = `Looks like the dependencies in this group are now empty`;\n      break;\n    case 'dependency_removed':\n      reason = `Looks like ${leadDependencyName} is no longer a dependency`;\n      break;\n    case 'up_to_date':\n      reason = `Looks like ${leadDependencyName} is up-to-date now`;\n      break;\n    case 'update_no_longer_possible':\n      reason = `Looks like ${leadDependencyName} can no longer be updated`;\n      break;\n  }\n  if (reason && reason.length > 0) {\n    reason += ', so this is no longer needed.';\n  }\n  return reason;\n}\n\nexport function getPullRequestDependenciesPropertyValueForOutputData(\n  data: DependabotCreatePullRequest,\n): DependabotExistingPR[] | DependabotExistingGroupPR {\n  const dependencies = data.dependencies?.map((dep) => {\n    return {\n      'dependency-name': dep.name,\n      'dependency-version': dep.version,\n      directory: dep.directory,\n    };\n  });\n  const dependencyGroupName = data['dependency-group']?.name;\n  if (!dependencyGroupName) return dependencies;\n  return {\n    'dependency-group-name': dependencyGroupName,\n    dependencies: dependencies,\n  } as DependabotExistingGroupPR;\n}\n\nexport function getPullRequestDescription(\n  packageManager: string,\n  body: string | null | undefined,\n  dependencies: DependabotDependency[],\n): string {\n  let header = '';\n  const footer = '';\n\n  // Fix up GitHub mentions encoding issues by removing instances of the zero-width space '\\u200B' as it does not render correctly in Azure DevOps.\n  // https://github.com/dependabot/dependabot-core/issues/9572\n  // https://github.com/dependabot/dependabot-core/blob/313fcff149b3126cb78b38d15f018907d729f8cc/common/lib/dependabot/pull_request_creator/message_builder/link_and_mention_sanitizer.rb#L245-L252\n  const description = (body || '').replace(new RegExp(decodeURIComponent('%EF%BF%BD%EF%BF%BD%EF%BF%BD'), 'g'), '');\n\n  // If there is exactly one dependency, add a compatibility score badge to the description header.\n  // Compatibility scores are intended for single dependency security updates, not group updates.\n  // https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores\n  if (dependencies.length === 1) {\n    const compatibilityScoreBadges = dependencies.map((dep) => {\n      return `![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=${dep.name}&package-manager=${packageManager}&previous-version=${dep['previous-version']}&new-version=${dep.version})`;\n    });\n    header += `${compatibilityScoreBadges.join(' ')}\\n\\n`;\n  }\n\n  // Build the full pull request description.\n  // The header/footer must not be truncated. If the description is too long, we truncate the body.\n  const maxDescriptionLength = 4000;\n  const maxDescriptionLengthAfterHeaderAndFooter = maxDescriptionLength - header.length - footer.length;\n  return `${header}${description.substring(0, maxDescriptionLengthAfterHeaderAndFooter)}${footer}`;\n}\n","import { HttpRequestError, isErrorTemporaryFailure } from '@/http';\nimport { logger } from '@/logger';\nimport type {\n  IAbandonPullRequest,\n  IApprovePullRequest,\n  ICreatePullRequest,\n  IPullRequestProperties,\n  IUpdatePullRequest,\n} from './models';\nimport {\n  CommentThreadStatus,\n  CommentType,\n  type IdentityRefWithVote,\n  ItemContentType,\n  PullRequestAsyncStatus,\n  PullRequestStatus,\n} from './types';\nimport type { AzureDevOpsOrganizationUrl } from './url-parts';\nimport { normalizeBranchName, normalizeFilePath } from './utils';\n\n/** Returned from AzureDevOpsWebApiClient.getUserId() when no user is authenticated */\nexport const ANONYMOUS_USER_ID = 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa';\n\n/** Azure DevOps REST API client. */\nexport class AzureDevOpsWebApiClient {\n  private readonly organisationApiUrl: string;\n  private readonly identityApiUrl: string;\n  private readonly accessToken: string;\n  private readonly debug: boolean;\n\n  private authenticatedUserId?: string;\n  private resolvedUserIds: Record<string, string>;\n\n  public static API_VERSION = '5.0'; // this is the same version used by dependabot-core\n  public static API_VERSION_PREVIEW = '5.0-preview';\n\n  constructor(url: AzureDevOpsOrganizationUrl, accessToken: string, debug: boolean = false) {\n    const organisationApiUrl = url.value.toString();\n    this.organisationApiUrl = organisationApiUrl.replace(/\\/$/, ''); // trim trailing slash\n    this.identityApiUrl = getIdentityApiUrl(organisationApiUrl).replace(/\\/$/, ''); // trim trailing slash\n    this.accessToken = accessToken;\n    this.debug = debug;\n    this.resolvedUserIds = {};\n  }\n\n  /**\n   * Get the identity of the authenticated user.\n   * @returns\n   */\n  public async getUserId(): Promise<string> {\n    if (!this.authenticatedUserId) {\n      const connectionData = await this.restApiGet(\n        `${this.organisationApiUrl}/_apis/connectiondata`,\n        undefined,\n        AzureDevOpsWebApiClient.API_VERSION_PREVIEW,\n      );\n      this.authenticatedUserId = connectionData?.authenticatedUser?.id;\n      if (!this.authenticatedUserId) {\n        throw new Error('Failed to get authenticated user ID');\n      }\n    }\n    return this.authenticatedUserId;\n  }\n\n  /**\n   * Get the identity id from a user name, email, or group name.\n   * Requires scope \"Identity (Read)\" (vso.identity).\n   * @param userNameEmailOrGroupName\n   * @returns\n   */\n  public async resolveIdentityId(userNameEmailOrGroupName: string): Promise<string | undefined> {\n    if (this.resolvedUserIds[userNameEmailOrGroupName]) {\n      return this.resolvedUserIds[userNameEmailOrGroupName];\n    }\n    try {\n      const identities = await this.restApiGet(`${this.identityApiUrl}/_apis/identities`, {\n        searchFilter: 'General',\n        filterValue: userNameEmailOrGroupName,\n        queryMembership: 'None',\n      });\n      if (!identities?.value || identities.value.length === 0) {\n        return undefined;\n      }\n      this.resolvedUserIds[userNameEmailOrGroupName] = identities.value[0]?.id;\n      return this.resolvedUserIds[userNameEmailOrGroupName];\n    } catch (e) {\n      logger.error(`Failed to resolve user id: ${e}`);\n      logger.debug(e); // Dump the error stack trace to help with debugging\n      return undefined;\n    }\n  }\n\n  /**\n   * Get the default branch for a repository.\n   * Requires scope \"Code (Read)\" (vso.code).\n   * @param project\n   * @param repository\n   * @returns\n   */\n  public async getDefaultBranch(project: string, repository: string): Promise<string | undefined> {\n    try {\n      const repo = await this.restApiGet(`${this.organisationApiUrl}/${project}/_apis/git/repositories/${repository}`);\n      if (!repo) {\n        throw new Error(`Repository '${project}/${repository}' not found`);\n      }\n\n      return normalizeBranchName(repo.defaultBranch);\n    } catch (e) {\n      logger.error(`Failed to get default branch for '${project}/${repository}': ${e}`);\n      logger.debug(e); // Dump the error stack trace to help with debugging\n      return undefined;\n    }\n  }\n\n  /**\n   * Get the list of branch names for a repository.\n   * Requires scope \"Code (Read)\" (vso.code).\n   * @param project\n   * @param repository\n   * @returns\n   */\n  public async getBranchNames(project: string, repository: string): Promise<string[] | undefined> {\n    try {\n      const refs = await this.restApiGet(\n        `${this.organisationApiUrl}/${project}/_apis/git/repositories/${repository}/refs`,\n      );\n      if (!refs) {\n        throw new Error(`Repository '${project}/${repository}' not found`);\n      }\n\n      return refs.value?.map((r: { name?: string }) => normalizeBranchName(r.name)) || [];\n    } catch (e) {\n      logger.error(`Failed to list branch names for '${project}/${repository}': ${e}`);\n      logger.debug(e); // Dump the error stack trace to help with debugging\n      return undefined;\n    }\n  }\n\n  /**\n   * Get the properties for all active pull request created by the supplied user.\n   * Requires scope \"Code (Read)\" (vso.code).\n   * @param project\n   * @param repository\n   * @param creator\n   * @returns\n   */\n  public async getActivePullRequestProperties(\n    project: string,\n    repository: string,\n    creator: string,\n  ): Promise<IPullRequestProperties[]> {\n    try {\n      const pullRequests = await this.restApiGet(\n        `${this.organisationApiUrl}/${project}/_apis/git/repositories/${repository}/pullrequests`,\n        {\n          'searchCriteria.creatorId': isGuid(creator) ? creator : await this.getUserId(),\n          'searchCriteria.status': 'Active',\n        },\n      );\n      if (!pullRequests?.value || pullRequests.value.length === 0) {\n        return [];\n      }\n\n      return await Promise.all(\n        pullRequests.value.map(async (pr: { pullRequestId: number }) => {\n          const properties = await this.restApiGet(\n            `${this.organisationApiUrl}/${project}/_apis/git/repositories/${repository}/pullrequests/${pr.pullRequestId}/properties`,\n          );\n          return {\n            id: pr.pullRequestId,\n            properties:\n              Object.keys(properties?.value || {}).map((key) => {\n                return {\n                  name: key,\n                  value: properties.value[key]?.$value,\n                };\n              }) || [],\n          };\n        }),\n      );\n    } catch (e) {\n      logger.error(`Failed to list active pull request properties: ${e}`);\n      logger.debug(e); // Dump the error stack trace to help with debugging\n      return [];\n    }\n  }\n\n  /**\n   * Create a new pull request.\n   * Requires scope \"Code (Write)\" (vso.code_write).\n   * Requires scope \"Identity (Read)\" (vso.identity), if assignees are specified.\n   * @param pr\n   * @returns\n   */\n  public async createPullRequest(pr: ICreatePullRequest): Promise<number | null> {\n    logger.info(`Creating pull request '${pr.title}'...`);\n    try {\n      const userId = await this.getUserId();\n\n      // Map the list of the pull request reviewer ids\n      // NOTE: Azure DevOps does not have a concept of assignees.\n      //       We treat them as optional reviewers. Branch policies should be used for required reviewers.\n      const reviewers: IdentityRefWithVote[] = [];\n      if (pr.assignees && pr.assignees.length > 0) {\n        for (const assignee of pr.assignees) {\n          const identityId = isGuid(assignee) ? assignee : await this.resolveIdentityId(assignee);\n          if (identityId && !reviewers.some((r) => r.id === identityId)) {\n            reviewers.push({\n              id: identityId,\n            });\n          } else {\n            logger.warn(`Unable to resolve assignee identity '${assignee}'`);\n          }\n        }\n      }\n\n      // Create the source branch and push a commit with the dependency file changes\n      logger.info(` - Pushing ${pr.changes.length} file change(s) to branch '${pr.source.branch}'...`);\n      const push = await this.restApiPost(\n        `${this.organisationApiUrl}/${pr.project}/_apis/git/repositories/${pr.repository}/pushes`,\n        {\n          refUpdates: [\n            {\n              name: `refs/heads/${pr.source.branch}`,\n              oldObjectId: pr.source.commit,\n            },\n          ],\n          commits: [\n            {\n              comment: pr.commitMessage,\n              author: pr.author,\n              changes: pr.changes.map((change) => {\n                return {\n                  changeType: change.changeType,\n                  item: {\n                    path: normalizeFilePath(change.path),\n                  },\n                  newContent: {\n                    content: Buffer.from(change.content, <BufferEncoding>change.encoding).toString('base64'),\n                    contentType: ItemContentType.Base64Encoded,\n                  },\n                };\n              }),\n            },\n          ],\n        },\n      );\n      if (!push?.commits?.length) {\n        throw new Error('Failed to push changes to source branch, no commits were created');\n      }\n      logger.info(` - Pushed commit: ${push.commits.map((c: { commitId: string }) => c.commitId).join(', ')}.`);\n\n      // Create the pull request\n      logger.info(` - Creating pull request to merge '${pr.source.branch}' into '${pr.target.branch}'...`);\n      const pullRequest = await this.restApiPost(\n        `${this.organisationApiUrl}/${pr.project}/_apis/git/repositories/${pr.repository}/pullrequests`,\n        {\n          sourceRefName: `refs/heads/${pr.source.branch}`,\n          targetRefName: `refs/heads/${pr.target.branch}`,\n          title: pr.title,\n          description: pr.description,\n          reviewers: reviewers,\n          workItemRefs: pr.workItems?.map((id) => ({ id: id })),\n          labels: pr.labels?.map((label) => ({ name: label })),\n        },\n      );\n      if (!pullRequest?.pullRequestId) {\n        throw new Error('Failed to create pull request, no pull request id was returned');\n      }\n      logger.info(` - Created pull request: #${pullRequest.pullRequestId}.`);\n\n      // Add the pull request properties\n      if (pr.properties && pr.properties.length > 0) {\n        logger.info(` - Adding dependency metadata to pull request properties...`);\n        const newProperties = await this.restApiPatch(\n          `${this.organisationApiUrl}/${pr.project}/_apis/git/repositories/${pr.repository}/pullrequests/${pullRequest.pullRequestId}/properties`,\n          pr.properties.map((property) => {\n            return {\n              op: 'add',\n              path: `/${property.name}`,\n              value: property.value,\n            };\n          }),\n          'application/json-patch+json',\n        );\n        if (!newProperties?.count) {\n          throw new Error('Failed to add dependency metadata properties to pull request');\n        }\n      }\n\n      // TODO: Upload the pull request description as a 'changes.md' file attachment?\n      //       This might be a way to work around the 4000 character limit for PR descriptions, but needs more investigation.\n      //       https://learn.microsoft.com/en-us/rest/api/azure/devops/git/pull-request-attachments/create?view=azure-devops-rest-7.1\n\n      // Set the pull request auto-complete status\n      if (pr.autoComplete) {\n        logger.info(` - Updating auto-complete options...`);\n        const updatedPullRequest = await this.restApiPatch(\n          `${this.organisationApiUrl}/${pr.project}/_apis/git/repositories/${pr.repository}/pullrequests/${pullRequest.pullRequestId}`,\n          {\n            autoCompleteSetBy: {\n              id: userId,\n            },\n            completionOptions: {\n              autoCompleteIgnoreConfigIds: pr.autoComplete.ignorePolicyConfigIds,\n              deleteSourceBranch: true,\n              mergeCommitMessage: mergeCommitMessage(pullRequest.pullRequestId, pr.title, pr.description),\n              mergeStrategy: pr.autoComplete.mergeStrategy,\n              transitionWorkItems: false,\n            },\n          },\n        );\n        if (!updatedPullRequest || updatedPullRequest.autoCompleteSetBy?.id !== userId) {\n          throw new Error('Failed to set auto-complete on pull request');\n        }\n      }\n\n      logger.info(` - Pull request was created successfully.`);\n      return pullRequest.pullRequestId;\n    } catch (e) {\n      logger.error(`Failed to create pull request: ${e}`);\n      logger.debug(e); // Dump the error stack trace to help with debugging\n      return null;\n    }\n  }\n\n  /**\n   * Update a pull request.\n   * Requires scope \"Code (Read & Write)\" (vso.code, vso.code_write).\n   * @param pr\n   * @returns\n   */\n  public async updatePullRequest(pr: IUpdatePullRequest): Promise<boolean> {\n    logger.info(`Updating pull request #${pr.pullRequestId}...`);\n    try {\n      // Get the pull request details\n      const pullRequest = await this.restApiGet(\n        `${this.organisationApiUrl}/${pr.project}/_apis/git/repositories/${pr.repository}/pullrequests/${pr.pullRequestId}`,\n      );\n      if (!pullRequest) {\n        throw new Error(`Pull request #${pr.pullRequestId} not found`);\n      }\n\n      // Skip if the pull request is a draft\n      if (pr.skipIfDraft && pullRequest.isDraft) {\n        logger.info(` - Skipping update as pull request is currently marked as a draft.`);\n        return true;\n      }\n\n      // Skip if the pull request has been modified by another author\n      if (pr.skipIfCommitsFromAuthorsOtherThan) {\n        const commits = await this.restApiGet(\n          `${this.organisationApiUrl}/${pr.project}/_apis/git/repositories/${pr.repository}/pullrequests/${pr.pullRequestId}/commits`,\n        );\n        if (\n          commits?.value?.some(\n            (c: { author?: { email?: string } }) => c.author?.email !== pr.skipIfCommitsFromAuthorsOtherThan,\n          )\n        ) {\n          logger.info(` - Skipping update as pull request has been modified by another user.`);\n          return true;\n        }\n      }\n\n      // Get the branch stats to check if the source branch is behind the target branch\n      const stats = await this.restApiGet(\n        `${this.organisationApiUrl}/${pr.project}/_apis/git/repositories/${pr.repository}/stats/branches`,\n        {\n          name: normalizeBranchName(pullRequest.sourceRefName),\n        },\n      );\n      if (stats?.behindCount === undefined) {\n        throw new Error(`Failed to get branch stats for '${pullRequest.sourceRefName}'`);\n      }\n\n      // Skip if the source branch is not behind the target branch\n      if (pr.skipIfNotBehindTargetBranch && stats.behindCount === 0) {\n        logger.info(` - Skipping update as source branch is not behind target branch.`);\n        return true;\n      }\n\n      // Rebase the target branch into the source branch to reset the \"behind\" count\n      const sourceBranchName = normalizeBranchName(pullRequest.sourceRefName);\n      const targetBranchName = normalizeBranchName(pullRequest.targetRefName);\n      if (stats.behindCount > 0) {\n        logger.info(\n          ` - Rebasing '${targetBranchName}' into '${sourceBranchName}' (${stats.behindCount} commit(s) behind)...`,\n        );\n        const rebase = await this.restApiPost(\n          `${this.organisationApiUrl}/${pr.project}/_apis/git/repositories/${pr.repository}/refs`,\n          [\n            {\n              name: pullRequest.sourceRefName,\n              oldObjectId: pullRequest.lastMergeSourceCommit.commitId,\n              newObjectId: pr.commit,\n            },\n          ],\n        );\n        if (rebase?.value?.[0]?.success !== true) {\n          throw new Error('Failed to rebase the target branch into the source branch');\n        }\n      }\n\n      // Push all file changes to the source branch\n      logger.info(` - Pushing ${pr.changes.length} file change(s) to branch '${pullRequest.sourceRefName}'...`);\n      const push = await this.restApiPost(\n        `${this.organisationApiUrl}/${pr.project}/_apis/git/repositories/${pr.repository}/pushes`,\n        {\n          refUpdates: [\n            {\n              name: pullRequest.sourceRefName,\n              oldObjectId: pr.commit,\n            },\n          ],\n          commits: [\n            {\n              comment:\n                pullRequest.mergeStatus === PullRequestAsyncStatus.Conflicts\n                  ? 'Resolve merge conflicts'\n                  : `Rebase '${sourceBranchName}' onto '${targetBranchName}'`,\n              author: pr.author,\n              changes: pr.changes.map((change) => {\n                return {\n                  changeType: change.changeType,\n                  item: {\n                    path: normalizeFilePath(change.path),\n                  },\n                  newContent: {\n                    content: Buffer.from(change.content, <BufferEncoding>change.encoding).toString('base64'),\n                    contentType: ItemContentType.Base64Encoded,\n                  },\n                };\n              }),\n            },\n          ],\n        },\n      );\n      if (!push?.commits?.length) {\n        throw new Error('Failed to push changes to source branch, no commits were created');\n      }\n      logger.info(` - Pushed commit: ${push.commits.map((c: { commitId: string }) => c.commitId).join(', ')}.`);\n\n      logger.info(` - Pull request was updated successfully.`);\n      return true;\n    } catch (e) {\n      logger.error(`Failed to update pull request: ${e}`);\n      logger.debug(e); // Dump the error stack trace to help with debugging\n      return false;\n    }\n  }\n\n  /**\n   * Approve a pull request.\n   * Requires scope \"Code (Write)\" (vso.code_write).\n   * @param pr\n   * @returns\n   */\n  public async approvePullRequest(pr: IApprovePullRequest): Promise<boolean> {\n    logger.info(`Approving pull request #${pr.pullRequestId}...`);\n    try {\n      // Approve the pull request\n      logger.info(` - Updating reviewer vote on pull request...`);\n      const userId = await this.getUserId();\n      const userVote = await this.restApiPut(\n        `${this.organisationApiUrl}/${pr.project}/_apis/git/repositories/${pr.repository}/pullrequests/${pr.pullRequestId}/reviewers/${userId}`,\n        {\n          // Vote 10 = \"approved\"; 5 = \"approved with suggestions\"; 0 = \"no vote\"; -5 = \"waiting for author\"; -10 = \"rejected\"\n          vote: 10,\n          // Reapprove must be set to true after the 2023 August 23 update;\n          // Approval of a previous PR iteration does not count in later iterations, which means we must (re)approve every after push to the source branch\n          // See: https://learn.microsoft.com/en-us/azure/devops/release-notes/2023/sprint-226-update#new-branch-policy-preventing-users-to-approve-their-own-changes\n          //      https://github.com/mburumaxwell/dependabot-azure-devops/issues/1069\n          isReapprove: true,\n        },\n        // API version 7.1 is required to use the 'isReapprove' parameter\n        // See: https://learn.microsoft.com/en-us/rest/api/azure/devops/git/pull-request-reviewers/create-pull-request-reviewer?view=azure-devops-rest-7.1&tabs=HTTP#request-body\n        //      https://learn.microsoft.com/en-us/azure/devops/integrate/concepts/rest-api-versioning?view=azure-devops#supported-versions\n        '7.1',\n      );\n      if (userVote?.vote !== 10) {\n        throw new Error('Failed to approve pull request, vote was not recorded');\n      }\n\n      logger.info(` - Pull request was approved successfully.`);\n      return true;\n    } catch (e) {\n      logger.error(`Failed to approve pull request: ${e}`);\n      logger.debug(e); // Dump the error stack trace to help with debugging\n      return false;\n    }\n  }\n\n  /**\n   * Abandon a pull request.\n   * Requires scope \"Code (Write)\" (vso.code_write).\n   * @param pr\n   * @returns\n   */\n  public async abandonPullRequest(pr: IAbandonPullRequest): Promise<boolean> {\n    logger.info(`Abandoning pull request #${pr.pullRequestId}...`);\n    try {\n      const userId = await this.getUserId();\n\n      // Add a comment to the pull request, if supplied\n      if (pr.comment) {\n        logger.info(` - Adding abandonment reason comment to pull request...`);\n        const thread = await this.restApiPost(\n          `${this.organisationApiUrl}/${pr.project}/_apis/git/repositories/${pr.repository}/pullrequests/${pr.pullRequestId}/threads`,\n          {\n            status: CommentThreadStatus.Closed,\n            comments: [\n              {\n                author: {\n                  id: userId,\n                },\n                content: pr.comment,\n                commentType: CommentType.System,\n              },\n            ],\n          },\n        );\n        if (!thread?.id) {\n          throw new Error('Failed to add comment to pull request, thread was not created');\n        }\n      }\n\n      // Abandon the pull request\n      logger.info(` - Abandoning pull request...`);\n      const abandonedPullRequest = await this.restApiPatch(\n        `${this.organisationApiUrl}/${pr.project}/_apis/git/repositories/${pr.repository}/pullrequests/${pr.pullRequestId}`,\n        {\n          status: PullRequestStatus.Abandoned,\n          closedBy: {\n            id: userId,\n          },\n        },\n      );\n      if (abandonedPullRequest?.status?.toLowerCase() !== 'abandoned') {\n        throw new Error('Failed to abandon pull request, status was not updated');\n      }\n\n      // Delete the source branch if required\n      if (pr.deleteSourceBranch) {\n        logger.info(` - Deleting source branch...`);\n        const deletedBranch = await this.restApiPost(\n          `${this.organisationApiUrl}/${pr.project}/_apis/git/repositories/${pr.repository}/refs`,\n          [\n            {\n              name: abandonedPullRequest.sourceRefName,\n              oldObjectId: abandonedPullRequest.lastMergeSourceCommit.commitId,\n              newObjectId: '0000000000000000000000000000000000000000',\n              isLocked: false,\n            },\n          ],\n        );\n        if (deletedBranch?.value?.[0]?.success !== true) {\n          throw new Error('Failed to delete the source branch');\n        }\n      }\n\n      logger.info(` - Pull request was abandoned successfully.`);\n      return true;\n    } catch (e) {\n      logger.error(`Failed to abandon pull request: ${e}`);\n      logger.debug(e); // Dump the error stack trace to help with debugging\n      return false;\n    }\n  }\n\n  private async restApiGet(\n    url: string,\n    params?: Record<string, unknown>,\n    apiVersion: string = AzureDevOpsWebApiClient.API_VERSION,\n  ) {\n    params ??= {};\n    const queryString = Object.keys(params)\n      .map((key) => `${key}=${params[key]}`)\n      .join('&');\n    const fullUrl = `${url}?api-version=${apiVersion}${queryString ? `&${queryString}` : ''}`;\n\n    return await sendRestApiRequestWithRetry(\n      'GET',\n      fullUrl,\n      undefined,\n      async () => {\n        return await fetch(fullUrl, {\n          method: 'GET',\n          headers: {\n            Accept: 'application/json',\n            Authorization: `Basic ${Buffer.from(`:${this.accessToken}`).toString('base64')}`,\n          },\n        });\n      },\n      this.debug,\n    );\n  }\n\n  private async restApiPost(url: string, data?: unknown, apiVersion: string = AzureDevOpsWebApiClient.API_VERSION) {\n    const fullUrl = `${url}?api-version=${apiVersion}`;\n    return await sendRestApiRequestWithRetry(\n      'POST',\n      fullUrl,\n      data,\n      async () => {\n        return await fetch(fullUrl, {\n          method: 'POST',\n          headers: {\n            'Content-Type': 'application/json',\n            Authorization: `Basic ${Buffer.from(`:${this.accessToken}`).toString('base64')}`,\n          },\n          body: JSON.stringify(data),\n        });\n      },\n      this.debug,\n    );\n  }\n\n  private async restApiPut(url: string, data?: unknown, apiVersion: string = AzureDevOpsWebApiClient.API_VERSION) {\n    const fullUrl = `${url}?api-version=${apiVersion}`;\n    return await sendRestApiRequestWithRetry(\n      'PUT',\n      fullUrl,\n      data,\n      async () => {\n        return await fetch(fullUrl, {\n          method: 'PUT',\n          headers: {\n            'Content-Type': 'application/json',\n            Authorization: `Basic ${Buffer.from(`:${this.accessToken}`).toString('base64')}`,\n          },\n          body: JSON.stringify(data),\n        });\n      },\n      this.debug,\n    );\n  }\n\n  private async restApiPatch(\n    url: string,\n    data?: unknown,\n    contentType?: string,\n    apiVersion: string = AzureDevOpsWebApiClient.API_VERSION,\n  ) {\n    const fullUrl = `${url}?api-version=${apiVersion}`;\n    return await sendRestApiRequestWithRetry(\n      'PATCH',\n      fullUrl,\n      data,\n      async () => {\n        return await fetch(fullUrl, {\n          method: 'PATCH',\n          headers: {\n            'Content-Type': contentType || 'application/json',\n            Authorization: `Basic ${Buffer.from(`:${this.accessToken}`).toString('base64')}`,\n          },\n          body: JSON.stringify(data),\n        });\n      },\n      this.debug,\n    );\n  }\n}\n\nfunction mergeCommitMessage(id: number, title: string, description: string): string {\n  //\n  // The merge commit message should contain the PR number and title for tracking.\n  // This is the default behaviour in Azure DevOps.\n  // Example:\n  //   Merged PR 24093: Bump Tingle.Extensions.Logging.LogAnalytics from 3.4.2-ci0005 to 3.4.2-ci0006\n  //\n  //   Bumps [Tingle.Extensions.Logging.LogAnalytics](...) from 3.4.2-ci0005 to 3.4.2-ci0006\n  //   - [Release notes](....)\n  //   - [Changelog](....)\n  //   - [Commits](....)\n  //\n  // There appears to be a DevOps bug when setting \"completeOptions\" with a \"mergeCommitMessage\" even when truncated to 4000 characters.\n  // The error message is:\n  //   Invalid argument value.\n  //   Parameter name: Completion options have exceeded the maximum encoded length (4184/4000)\n  //\n  // The effective limit seems to be about 3500 characters:\n  //   https://developercommunity.visualstudio.com/t/raise-the-character-limit-for-pull-request-descrip/365708#T-N424531\n  //\n  return `Merged PR ${id}: ${title}\\n\\n${description}`.slice(0, 3500);\n}\n\nfunction isGuid(guid: string): boolean {\n  const regex = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;\n  return regex.test(guid);\n}\n\nfunction getIdentityApiUrl(organisationApiUrl: string): string {\n  const uri = new URL(organisationApiUrl);\n  const hostname = uri.hostname.toLowerCase();\n\n  // If the organisation is hosted on Azure DevOps, use the 'vssps.dev.azure.com' domain\n  if (hostname === 'dev.azure.com' || hostname.endsWith('.visualstudio.com')) {\n    uri.host = 'vssps.dev.azure.com';\n  }\n  return uri.toString();\n}\n\nexport async function sendRestApiRequestWithRetry(\n  method: string,\n  url: string,\n  payload: unknown,\n  requestAsync: () => Promise<Response>,\n  isDebug: boolean = false,\n  retryCount: number = 3,\n  retryDelay: number = 3000,\n) {\n  let body: string | undefined;\n  try {\n    // Send the request, ready the response\n    if (isDebug) logger.debug(`🌎 🠊 [${method}] ${url}`);\n    const response = await requestAsync();\n    body = await response.text();\n    const { status: statusCode, statusText: statusMessage } = response;\n    if (isDebug) logger.debug(`🌎 🠈 [${statusCode}] ${statusMessage}`);\n\n    // Check that the request was successful\n    if (statusCode < 200 || statusCode > 299) {\n      throw new HttpRequestError(`HTTP ${method} '${url}' failed: ${statusCode} ${statusMessage}`, statusCode);\n    }\n\n    // Parse the response\n    return JSON.parse(body);\n  } catch (e) {\n    const err = e as Error;\n    // Retry the request if the error is a temporary failure\n    if (retryCount > 1 && isErrorTemporaryFailure(err)) {\n      logger.warn(err.message);\n      if (isDebug) logger.debug(`⏳ Retrying request in ${retryDelay}ms...`);\n      await new Promise((resolve) => setTimeout(resolve, retryDelay));\n      return sendRestApiRequestWithRetry(method, url, payload, requestAsync, isDebug, retryCount - 1, retryDelay);\n    }\n\n    // In debug mode, log the error, request, and response for debugging\n    if (isDebug) {\n      if (payload) {\n        logger.debug(`REQUEST: ${JSON.stringify(payload)}`);\n      }\n      if (body) {\n        logger.debug(`RESPONSE: ${body}`);\n      }\n    }\n\n    logger.trace(`THROW${e}`);\n    throw e;\n  }\n}\n","import { existsSync } from 'node:fs';\nimport { readFile } from 'node:fs/promises';\nimport * as path from 'node:path';\n\nimport {\n  type DependabotConfig,\n  POSSIBLE_CONFIG_FILE_PATHS,\n  parseDependabotConfig,\n  type VariableFinderFn,\n} from '@/dependabot';\nimport { logger } from '@/logger';\nimport type { AzureDevOpsRepositoryUrl } from './url-parts';\n\n/**\n * Parse the dependabot config YAML file to specify update configuration.\n * The file should be located at any of `POSSIBLE_CONFIG_FILE_PATHS`.\n *\n * To view YAML file format, visit\n * https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#allow\n *\n * @returns {DependabotConfig} config - the dependabot configuration\n */\nexport async function getDependabotConfig({\n  url,\n  token,\n  remote,\n  rootDir = process.cwd(),\n  variableFinder,\n}: {\n  url: AzureDevOpsRepositoryUrl;\n  token: string;\n  /**\n   * Whether to fetch the configuration file via the REST API (true) or look for it locally (false).\n   */\n  remote: boolean;\n  rootDir?: string;\n  variableFinder: VariableFinderFn;\n}): Promise<DependabotConfig> {\n  let configPath: undefined | string;\n  let configContents: undefined | string;\n\n  /*\n   * The configuration file can be available locally if the repository is cloned.\n   * Otherwise, we should get it via the API which supports 2 scenarios:\n   * 1. Running the pipeline without cloning, which is useful for huge repositories (multiple submodules or large commit log)\n   * 2. Running a single pipeline to update multiple repositories https://github.com/mburumaxwell/dependabot-azure-devops/issues/328\n   */\n\n  if (remote) {\n    logger.debug(`Attempting to fetch configuration file via REST API ...`);\n    for (const fp of POSSIBLE_CONFIG_FILE_PATHS) {\n      // make HTTP request\n      const requestUrl = `${url.value}${url.project}/_apis/git/repositories/${url.repository}/items?path=/${fp}`;\n      logger.debug(`GET ${requestUrl}`);\n\n      try {\n        const authHeader = `Basic ${Buffer.from(`x-access-token:${token}`).toString('base64')}`;\n        const response = await fetch(requestUrl, {\n          headers: {\n            Authorization: authHeader,\n            Accept: '*/*', // Gotcha!!! without this SH*T fails terribly\n          },\n        });\n        if (response.ok) {\n          logger.debug(`Found configuration file at '${requestUrl}'`);\n          configContents = await response.text();\n          configPath = fp;\n          break;\n        } else if (response.status === 404) {\n          logger.trace(`No configuration file at '${requestUrl}'`);\n          // biome-ignore lint/complexity/noUselessContinue: continue is useful here for clarity\n          continue;\n        } else if (response.status === 401) {\n          throw new Error(`No or invalid access token has been provided to access '${requestUrl}'`);\n        } else if (response.status === 403) {\n          throw new Error(`The access token provided does not have permissions to access '${requestUrl}'`);\n        }\n      } catch (error) {\n        if (error instanceof Error && error.message.includes('access token')) {\n          throw error;\n        } else {\n          throw error;\n        }\n      }\n    }\n  } else {\n    for (const fp of POSSIBLE_CONFIG_FILE_PATHS) {\n      const filePath = path.join(rootDir, fp);\n      if (existsSync(filePath)) {\n        logger.debug(`Found configuration file cloned at ${filePath}`);\n        configContents = await readFile(filePath, 'utf-8');\n        configPath = filePath;\n        break;\n      } else {\n        logger.trace(`No configuration file cloned at ${filePath}`);\n      }\n    }\n  }\n\n  // Ensure we have file contents. Otherwise throw a well readable error.\n  if (!configContents || !configPath || typeof configContents !== 'string') {\n    throw new Error(`Configuration file not found at possible locations: ${POSSIBLE_CONFIG_FILE_PATHS.join(', ')}`);\n  } else {\n    logger.trace('Configuration file contents read.');\n  }\n\n  return await parseDependabotConfig({ configContents, configPath, variableFinder });\n}\n","export type AzureDevOpsOrganizationUrl = {\n  /** URL of the organisation. This may lack the project name */\n  value: URL;\n\n  /** Organisation URL hostname */\n  hostname: string;\n\n  /** Organisation API endpoint URL */\n  'api-endpoint': string;\n\n  /** Organisation name/slug */\n  organisation: string;\n\n  /** Virtual directory if present (on-premises only) */\n  'virtual-directory'?: string;\n};\n\nexport type AzureDevOpsProjectUrl = AzureDevOpsOrganizationUrl & {\n  /** Project ID or Name */\n  project: string;\n};\n\nexport type AzureDevOpsRepositoryUrl = AzureDevOpsProjectUrl & {\n  /** Repository ID or Name */\n  repository: string;\n\n  /** Slug of the repository e.g. `contoso/prj1/_git/repo1`, `tfs/contoso/prj1/_git/repo1` */\n  'repository-slug': string;\n};\n\nexport function extractOrganizationUrl({ organisationUrl }: { organisationUrl: string }): AzureDevOpsOrganizationUrl {\n  // convert url string into a valid JS URL object\n  const value = new URL(organisationUrl);\n  const protocol = value.protocol.slice(0, -1);\n  let { hostname } = value;\n  const visualStudioUrlRegex = /^(?<prefix>\\S+)\\.visualstudio\\.com$/iu;\n  if (visualStudioUrlRegex.test(hostname)) hostname = 'dev.azure.com'; // TODO: should we really be converting back to the new hostname?\n\n  const organisation: string = extractOrganisation(organisationUrl);\n\n  const virtualDirectory = extractVirtualDirectory(value);\n  const apiEndpoint = `${protocol}://${hostname}${value.port ? `:${value.port}` : ''}/${virtualDirectory ? `${virtualDirectory}/` : ''}`;\n\n  return {\n    value,\n    hostname,\n    'api-endpoint': apiEndpoint,\n    organisation,\n    'virtual-directory': virtualDirectory,\n  };\n}\n\nexport function extractProjectUrl({\n  organisationUrl,\n  project,\n}: {\n  organisationUrl: string;\n  project: string;\n}): AzureDevOpsProjectUrl {\n  const extracted = extractOrganizationUrl({ organisationUrl });\n  const escapedProject = encodeURI(project); // encode special characters like spaces\n\n  return {\n    ...extracted,\n    project: escapedProject,\n  };\n}\n\nexport function extractRepositoryUrl({\n  organisationUrl,\n  project,\n  repository,\n}: {\n  organisationUrl: string;\n  project: string;\n  repository: string;\n}): AzureDevOpsRepositoryUrl {\n  const extracted = extractProjectUrl({ organisationUrl, project });\n  const { organisation, 'virtual-directory': virtualDirectory, project: escapedProject } = extracted;\n\n  const escapedRepository = encodeURI(repository); // encode special characters like spaces\n  const repoSlug = `${virtualDirectory ? `${virtualDirectory}/` : ''}${organisation}/${escapedProject}/_git/${escapedRepository}`;\n\n  return {\n    ...extracted,\n    repository: escapedRepository,\n    'repository-slug': repoSlug,\n  };\n}\n\n/**\n * Extract organisation name from organisation URL\n *\n * @param organisationUrl\n *\n * @returns organisation name\n */\nfunction extractOrganisation(organisationUrl: string): string {\n  const parts = organisationUrl.split('/');\n\n  // Check for on-premise style: https://server.domain.com/tfs/x/\n  if (parts.length === 6) return parts[4]!;\n\n  // Check for new style: https://dev.azure.com/x/\n  if (parts.length === 5) return parts[3]!;\n\n  // Check for old style: https://x.visualstudio.com/\n  // Get x.visualstudio.com part; Return organisation part (x).\n  if (parts.length === 4) return parts[2]!.split('.')[0]!;\n\n  throw new Error(`Error parsing organisation from organisation url: '${organisationUrl}'.`);\n}\n\n/**\n * Extract virtual directory from organisation URL\n *\n * Virtual Directories are sometimes used in on-premises\n * @param organisationUrl\n *\n * @returns virtual directory\n *\n * @example URLs typically are like this:`https://server.domain.com/tfs/x/` and `tfs` is the virtual directory\n */\nfunction extractVirtualDirectory(organisationUrl: URL) {\n  // extract the pathname from the url then split\n  // pathname takes the shape '/tfs/x/'\n  const path = organisationUrl.pathname.split('/');\n\n  // Virtual Directories are sometimes used in on-premises\n  // URLs typically are like this: https://server.domain.com/tfs/x/\n  // The pathname extracted looks like this: '/tfs/x/'\n  return path.length === 4 ? path[1]! : undefined;\n}\n"],"mappings":";;;;;;;;;;AAAA,IAAY,gFAAL;AACL;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;AAGF,IAAY,sFAAL;AACL;AACA;AACA;AACA;;;AAGF,IAAY,sEAAL;AACL;AACA;AACA;AACA;AACA;AACA;AACA;;;AAEF,IAAY,sDAAL;AACL;AACA;AACA;AACA;;;AAEF,IAAY,8DAAL;AACL;AACA;;;AAEF,IAAY,4EAAL;AACL;AACA;AACA;AACA;AACA;AACA;;;AAEF,IAAY,kEAAL;AACL;AACA;AACA;AACA;AACA;;;;;;;;;;ACnDF,MAAa,mDAAmD;AAChE,MAAa,gDAAgD;AAC7D,MAAa,6CAA6C;;;;ACY1D,SAAgB,kBAAkB,QAAsB;AAEtD,QAAOA,QACH,QAAQ,OAAO,IAAI,EACnB,QAAQ,SAAS,IAAI,EACrB,QAAQ,WAAW,MAAM;;AAG/B,SAAgB,oBAAoB,QAAqC;AAEvE,QAAO,QAAQ,QAAQ,mBAAmB,GAAG;;AAG/C,MAAa,+BAA+B,2BAA2B,OAAO,CAAC,GAAG,gCAAgC;AAElH,SAAgB,2BACd,gBACA,cACA;AACA,QAAO,CACL;EACE,MAAM;EACN,OAAO;EACR,EACD;EACE,MAAM;EACN,OAAO,KAAK,UAAU,aAAa;EACpC,CACF;;AAGH,SAAgB,2BACd,cACA,gBACoE;AACpE,QAAO,OAAO,YACZ,aACG,QAAQ,OAAO;AACd,SAAO,GAAG,YAAY,MACnB,MACC,EAAE,SAAS,kDACV,mBAAmB,QAAQ,EAAE,UAAU,gBAC3C;GACD,CACD,KAAK,OAAO;AACX,SAAO,CACL,GAAG,IACH,6BAA6B,MAC3B,KAAK,MAAM,GAAG,WAAY,MAAM,MAAM,EAAE,SAAS,2CAA2C,CAAE,MAAM,CACrG,CACF;GACD,CACL;;AAGH,SAAgB,iCACd,sBACA,gBACA,iBACoC;AACpC,QAAO,qBAAqB,MAAM,OAAO;AACvC,SACE,GAAG,YAAY,MACZ,MAAM,EAAE,SAAS,iDAAiD,EAAE,UAAU,eAChF,IACD,GAAG,YAAY,MACZ,MACC,EAAE,SAAS,8CACX,SAAS,mBAAmB,6BAA6B,MAAM,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,gBAAgB,CACzG;GAEH;;AAGJ,SAAS,mBAAmB,cAA4E;AAEtG,SADa,MAAM,QAAQ,aAAa,GAAG,eAAe,aAAa,cAC3D,KAAK,QAAQ,IAAI,oBAAoB,UAAU,CAAC;;AAG9D,SAAS,SAAS,GAAa,GAAsB;AACnD,KAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,QAAO,EAAE,OAAO,SAAS,EAAE,SAAS,KAAK,CAAC;;AAG5C,SAAgB,wCACd,MACe;AACf,QAAO,KAAK,4BACT,QAAQ,SAAS,KAAK,SAAS,OAAO,CACtC,KAAK,SAAS;EACb,IAAI,aAAa,yBAAyB;AAC1C,MAAI,KAAK,YAAY,KACnB,cAAa,yBAAyB;WAC7B,KAAK,cAAc,SAC5B,cAAa,yBAAyB;MAEtC,cAAa,yBAAyB;AAExC,SAAO;GACO;GACZ,MAAM,KAAK,KAAK,KAAK,WAAW,KAAK,KAAK;GAC1C,SAAS,KAAK;GACd,UAAU,KAAK,oBAAoB;GACpC;GACD;;AAGN,SAAgB,uCAAuC,MAAsD;CAE3G,MAAM,qBAAqB,KAAK,oBAAoB;CACpD,IAAIC;AACJ,SAAQ,KAAK,QAAb;EACE,KAAK;AACH,YAAS;AACT;EACF,KAAK;AACH,YAAS;AACT;EACF,KAAK;AACH,YAAS,cAAc,mBAAmB;AAC1C;EACF,KAAK;AACH,YAAS,cAAc,mBAAmB;AAC1C;EACF,KAAK;AACH,YAAS,cAAc,mBAAmB;AAC1C;;AAEJ,KAAI,UAAU,OAAO,SAAS,EAC5B,WAAU;AAEZ,QAAO;;AAGT,SAAgB,qDACd,MACoD;CACpD,MAAM,eAAe,KAAK,cAAc,KAAK,QAAQ;AACnD,SAAO;GACL,mBAAmB,IAAI;GACvB,sBAAsB,IAAI;GAC1B,WAAW,IAAI;GAChB;GACD;CACF,MAAM,sBAAsB,KAAK,qBAAqB;AACtD,KAAI,CAAC,oBAAqB,QAAO;AACjC,QAAO;EACL,yBAAyB;EACX;EACf;;AAGH,SAAgB,0BACd,gBACA,MACA,cACQ;CACR,IAAI,SAAS;CACb,MAAM,SAAS;CAKf,MAAM,eAAe,QAAQ,IAAI,QAAQ,IAAI,OAAO,mBAAmB,8BAA8B,EAAE,IAAI,EAAE,GAAG;AAKhH,KAAI,aAAa,WAAW,GAAG;EAC7B,MAAM,2BAA2B,aAAa,KAAK,QAAQ;AACzD,UAAO,wHAAwH,IAAI,KAAK,mBAAmB,eAAe,oBAAoB,IAAI,oBAAoB,eAAe,IAAI,QAAQ;IACjP;AACF,YAAU,GAAG,yBAAyB,KAAK,IAAI,CAAC;;CAMlD,MAAM,2CADuB,MAC2C,OAAO,SAAS;AACxF,QAAO,GAAG,SAAS,YAAY,UAAU,GAAG,yCAAyC,GAAG;;;;;;AClL1F,MAAa,oBAAoB;;AAGjC,IAAa,0BAAb,MAAa,wBAAwB;CACnC,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,AAAQ;CACR,AAAQ;CAER,OAAc,cAAc;CAC5B,OAAc,sBAAsB;CAEpC,YAAY,KAAiC,aAAqB,QAAiB,OAAO;EACxF,MAAM,qBAAqB,IAAI,MAAM,UAAU;AAC/C,OAAK,qBAAqB,mBAAmB,QAAQ,OAAO,GAAG;AAC/D,OAAK,iBAAiB,kBAAkB,mBAAmB,CAAC,QAAQ,OAAO,GAAG;AAC9E,OAAK,cAAc;AACnB,OAAK,QAAQ;AACb,OAAK,kBAAkB,EAAE;;;;;;CAO3B,MAAa,YAA6B;AACxC,MAAI,CAAC,KAAK,qBAAqB;AAM7B,QAAK,uBALkB,MAAM,KAAK,WAChC,GAAG,KAAK,mBAAmB,wBAC3B,QACA,wBAAwB,oBACzB,GAC0C,mBAAmB;AAC9D,OAAI,CAAC,KAAK,oBACR,OAAM,IAAI,MAAM,sCAAsC;;AAG1D,SAAO,KAAK;;;;;;;;CASd,MAAa,kBAAkB,0BAA+D;AAC5F,MAAI,KAAK,gBAAgB,0BACvB,QAAO,KAAK,gBAAgB;AAE9B,MAAI;GACF,MAAM,aAAa,MAAM,KAAK,WAAW,GAAG,KAAK,eAAe,oBAAoB;IAClF,cAAc;IACd,aAAa;IACb,iBAAiB;IAClB,CAAC;AACF,OAAI,CAAC,YAAY,SAAS,WAAW,MAAM,WAAW,EACpD;AAEF,QAAK,gBAAgB,4BAA4B,WAAW,MAAM,IAAI;AACtE,UAAO,KAAK,gBAAgB;WACrB,GAAG;AACV,UAAO,MAAM,8BAA8B,IAAI;AAC/C,UAAO,MAAM,EAAE;AACf;;;;;;;;;;CAWJ,MAAa,iBAAiB,SAAiB,YAAiD;AAC9F,MAAI;GACF,MAAM,OAAO,MAAM,KAAK,WAAW,GAAG,KAAK,mBAAmB,GAAG,QAAQ,0BAA0B,aAAa;AAChH,OAAI,CAAC,KACH,OAAM,IAAI,MAAM,eAAe,QAAQ,GAAG,WAAW,aAAa;AAGpE,UAAO,oBAAoB,KAAK,cAAc;WACvC,GAAG;AACV,UAAO,MAAM,qCAAqC,QAAQ,GAAG,WAAW,KAAK,IAAI;AACjF,UAAO,MAAM,EAAE;AACf;;;;;;;;;;CAWJ,MAAa,eAAe,SAAiB,YAAmD;AAC9F,MAAI;GACF,MAAM,OAAO,MAAM,KAAK,WACtB,GAAG,KAAK,mBAAmB,GAAG,QAAQ,0BAA0B,WAAW,OAC5E;AACD,OAAI,CAAC,KACH,OAAM,IAAI,MAAM,eAAe,QAAQ,GAAG,WAAW,aAAa;AAGpE,UAAO,KAAK,OAAO,KAAK,MAAyB,oBAAoB,EAAE,KAAK,CAAC,IAAI,EAAE;WAC5E,GAAG;AACV,UAAO,MAAM,oCAAoC,QAAQ,GAAG,WAAW,KAAK,IAAI;AAChF,UAAO,MAAM,EAAE;AACf;;;;;;;;;;;CAYJ,MAAa,+BACX,SACA,YACA,SACmC;AACnC,MAAI;GACF,MAAM,eAAe,MAAM,KAAK,WAC9B,GAAG,KAAK,mBAAmB,GAAG,QAAQ,0BAA0B,WAAW,gBAC3E;IACE,4BAA4B,OAAO,QAAQ,GAAG,UAAU,MAAM,KAAK,WAAW;IAC9E,yBAAyB;IAC1B,CACF;AACD,OAAI,CAAC,cAAc,SAAS,aAAa,MAAM,WAAW,EACxD,QAAO,EAAE;AAGX,UAAO,MAAM,QAAQ,IACnB,aAAa,MAAM,IAAI,OAAO,OAAkC;IAC9D,MAAM,aAAa,MAAM,KAAK,WAC5B,GAAG,KAAK,mBAAmB,GAAG,QAAQ,0BAA0B,WAAW,gBAAgB,GAAG,cAAc,aAC7G;AACD,WAAO;KACL,IAAI,GAAG;KACP,YACE,OAAO,KAAK,YAAY,SAAS,EAAE,CAAC,CAAC,KAAK,QAAQ;AAChD,aAAO;OACL,MAAM;OACN,OAAO,WAAW,MAAM,MAAM;OAC/B;OACD,IAAI,EAAE;KACX;KACD,CACH;WACM,GAAG;AACV,UAAO,MAAM,kDAAkD,IAAI;AACnE,UAAO,MAAM,EAAE;AACf,UAAO,EAAE;;;;;;;;;;CAWb,MAAa,kBAAkB,IAAgD;AAC7E,SAAO,KAAK,0BAA0B,GAAG,MAAM,MAAM;AACrD,MAAI;GACF,MAAM,SAAS,MAAM,KAAK,WAAW;GAKrC,MAAMC,YAAmC,EAAE;AAC3C,OAAI,GAAG,aAAa,GAAG,UAAU,SAAS,EACxC,MAAK,MAAM,YAAY,GAAG,WAAW;IACnC,MAAM,aAAa,OAAO,SAAS,GAAG,WAAW,MAAM,KAAK,kBAAkB,SAAS;AACvF,QAAI,cAAc,CAAC,UAAU,MAAM,MAAM,EAAE,OAAO,WAAW,CAC3D,WAAU,KAAK,EACb,IAAI,YACL,CAAC;QAEF,QAAO,KAAK,wCAAwC,SAAS,GAAG;;AAMtE,UAAO,KAAK,cAAc,GAAG,QAAQ,OAAO,6BAA6B,GAAG,OAAO,OAAO,MAAM;GAChG,MAAM,OAAO,MAAM,KAAK,YACtB,GAAG,KAAK,mBAAmB,GAAG,GAAG,QAAQ,0BAA0B,GAAG,WAAW,UACjF;IACE,YAAY,CACV;KACE,MAAM,cAAc,GAAG,OAAO;KAC9B,aAAa,GAAG,OAAO;KACxB,CACF;IACD,SAAS,CACP;KACE,SAAS,GAAG;KACZ,QAAQ,GAAG;KACX,SAAS,GAAG,QAAQ,KAAK,WAAW;AAClC,aAAO;OACL,YAAY,OAAO;OACnB,MAAM,EACJ,MAAM,kBAAkB,OAAO,KAAK,EACrC;OACD,YAAY;QACV,SAAS,OAAO,KAAK,OAAO,SAAyB,OAAO,SAAS,CAAC,SAAS,SAAS;QACxF,aAAa,gBAAgB;QAC9B;OACF;OACD;KACH,CACF;IACF,CACF;AACD,OAAI,CAAC,MAAM,SAAS,OAClB,OAAM,IAAI,MAAM,mEAAmE;AAErF,UAAO,KAAK,qBAAqB,KAAK,QAAQ,KAAK,MAA4B,EAAE,SAAS,CAAC,KAAK,KAAK,CAAC,GAAG;AAGzG,UAAO,KAAK,sCAAsC,GAAG,OAAO,OAAO,UAAU,GAAG,OAAO,OAAO,MAAM;GACpG,MAAM,cAAc,MAAM,KAAK,YAC7B,GAAG,KAAK,mBAAmB,GAAG,GAAG,QAAQ,0BAA0B,GAAG,WAAW,gBACjF;IACE,eAAe,cAAc,GAAG,OAAO;IACvC,eAAe,cAAc,GAAG,OAAO;IACvC,OAAO,GAAG;IACV,aAAa,GAAG;IACL;IACX,cAAc,GAAG,WAAW,KAAK,QAAQ,EAAM,IAAI,EAAE;IACrD,QAAQ,GAAG,QAAQ,KAAK,WAAW,EAAE,MAAM,OAAO,EAAE;IACrD,CACF;AACD,OAAI,CAAC,aAAa,cAChB,OAAM,IAAI,MAAM,iEAAiE;AAEnF,UAAO,KAAK,6BAA6B,YAAY,cAAc,GAAG;AAGtE,OAAI,GAAG,cAAc,GAAG,WAAW,SAAS,GAAG;AAC7C,WAAO,KAAK,8DAA8D;AAY1E,QAAI,EAXkB,MAAM,KAAK,aAC/B,GAAG,KAAK,mBAAmB,GAAG,GAAG,QAAQ,0BAA0B,GAAG,WAAW,gBAAgB,YAAY,cAAc,cAC3H,GAAG,WAAW,KAAK,aAAa;AAC9B,YAAO;MACL,IAAI;MACJ,MAAM,IAAI,SAAS;MACnB,OAAO,SAAS;MACjB;MACD,EACF,8BACD,GACmB,MAClB,OAAM,IAAI,MAAM,+DAA+D;;AASnF,OAAI,GAAG,cAAc;AACnB,WAAO,KAAK,uCAAuC;IACnD,MAAM,qBAAqB,MAAM,KAAK,aACpC,GAAG,KAAK,mBAAmB,GAAG,GAAG,QAAQ,0BAA0B,GAAG,WAAW,gBAAgB,YAAY,iBAC7G;KACE,mBAAmB,EACjB,IAAI,QACL;KACD,mBAAmB;MACjB,6BAA6B,GAAG,aAAa;MAC7C,oBAAoB;MACpB,oBAAoB,mBAAmB,YAAY,eAAe,GAAG,OAAO,GAAG,YAAY;MAC3F,eAAe,GAAG,aAAa;MAC/B,qBAAqB;MACtB;KACF,CACF;AACD,QAAI,CAAC,sBAAsB,mBAAmB,mBAAmB,OAAO,OACtE,OAAM,IAAI,MAAM,8CAA8C;;AAIlE,UAAO,KAAK,4CAA4C;AACxD,UAAO,YAAY;WACZ,GAAG;AACV,UAAO,MAAM,kCAAkC,IAAI;AACnD,UAAO,MAAM,EAAE;AACf,UAAO;;;;;;;;;CAUX,MAAa,kBAAkB,IAA0C;AACvE,SAAO,KAAK,0BAA0B,GAAG,cAAc,KAAK;AAC5D,MAAI;GAEF,MAAM,cAAc,MAAM,KAAK,WAC7B,GAAG,KAAK,mBAAmB,GAAG,GAAG,QAAQ,0BAA0B,GAAG,WAAW,gBAAgB,GAAG,gBACrG;AACD,OAAI,CAAC,YACH,OAAM,IAAI,MAAM,iBAAiB,GAAG,cAAc,YAAY;AAIhE,OAAI,GAAG,eAAe,YAAY,SAAS;AACzC,WAAO,KAAK,qEAAqE;AACjF,WAAO;;AAIT,OAAI,GAAG,mCAIL;SAHgB,MAAM,KAAK,WACzB,GAAG,KAAK,mBAAmB,GAAG,GAAG,QAAQ,0BAA0B,GAAG,WAAW,gBAAgB,GAAG,cAAc,UACnH,GAEU,OAAO,MACb,MAAuC,EAAE,QAAQ,UAAU,GAAG,kCAChE,EACD;AACA,YAAO,KAAK,wEAAwE;AACpF,YAAO;;;GAKX,MAAM,QAAQ,MAAM,KAAK,WACvB,GAAG,KAAK,mBAAmB,GAAG,GAAG,QAAQ,0BAA0B,GAAG,WAAW,kBACjF,EACE,MAAM,oBAAoB,YAAY,cAAc,EACrD,CACF;AACD,OAAI,OAAO,gBAAgB,OACzB,OAAM,IAAI,MAAM,mCAAmC,YAAY,cAAc,GAAG;AAIlF,OAAI,GAAG,+BAA+B,MAAM,gBAAgB,GAAG;AAC7D,WAAO,KAAK,mEAAmE;AAC/E,WAAO;;GAIT,MAAM,mBAAmB,oBAAoB,YAAY,cAAc;GACvE,MAAM,mBAAmB,oBAAoB,YAAY,cAAc;AACvE,OAAI,MAAM,cAAc,GAAG;AACzB,WAAO,KACL,gBAAgB,iBAAiB,UAAU,iBAAiB,KAAK,MAAM,YAAY,uBACpF;AAWD,SAVe,MAAM,KAAK,YACxB,GAAG,KAAK,mBAAmB,GAAG,GAAG,QAAQ,0BAA0B,GAAG,WAAW,QACjF,CACE;KACE,MAAM,YAAY;KAClB,aAAa,YAAY,sBAAsB;KAC/C,aAAa,GAAG;KACjB,CACF,CACF,GACW,QAAQ,IAAI,YAAY,KAClC,OAAM,IAAI,MAAM,4DAA4D;;AAKhF,UAAO,KAAK,cAAc,GAAG,QAAQ,OAAO,6BAA6B,YAAY,cAAc,MAAM;GACzG,MAAM,OAAO,MAAM,KAAK,YACtB,GAAG,KAAK,mBAAmB,GAAG,GAAG,QAAQ,0BAA0B,GAAG,WAAW,UACjF;IACE,YAAY,CACV;KACE,MAAM,YAAY;KAClB,aAAa,GAAG;KACjB,CACF;IACD,SAAS,CACP;KACE,SACE,YAAY,gBAAgB,uBAAuB,YAC/C,4BACA,WAAW,iBAAiB,UAAU,iBAAiB;KAC7D,QAAQ,GAAG;KACX,SAAS,GAAG,QAAQ,KAAK,WAAW;AAClC,aAAO;OACL,YAAY,OAAO;OACnB,MAAM,EACJ,MAAM,kBAAkB,OAAO,KAAK,EACrC;OACD,YAAY;QACV,SAAS,OAAO,KAAK,OAAO,SAAyB,OAAO,SAAS,CAAC,SAAS,SAAS;QACxF,aAAa,gBAAgB;QAC9B;OACF;OACD;KACH,CACF;IACF,CACF;AACD,OAAI,CAAC,MAAM,SAAS,OAClB,OAAM,IAAI,MAAM,mEAAmE;AAErF,UAAO,KAAK,qBAAqB,KAAK,QAAQ,KAAK,MAA4B,EAAE,SAAS,CAAC,KAAK,KAAK,CAAC,GAAG;AAEzG,UAAO,KAAK,4CAA4C;AACxD,UAAO;WACA,GAAG;AACV,UAAO,MAAM,kCAAkC,IAAI;AACnD,UAAO,MAAM,EAAE;AACf,UAAO;;;;;;;;;CAUX,MAAa,mBAAmB,IAA2C;AACzE,SAAO,KAAK,2BAA2B,GAAG,cAAc,KAAK;AAC7D,MAAI;AAEF,UAAO,KAAK,+CAA+C;GAC3D,MAAM,SAAS,MAAM,KAAK,WAAW;AAiBrC,QAhBiB,MAAM,KAAK,WAC1B,GAAG,KAAK,mBAAmB,GAAG,GAAG,QAAQ,0BAA0B,GAAG,WAAW,gBAAgB,GAAG,cAAc,aAAa,UAC/H;IAEE,MAAM;IAKN,aAAa;IACd,EAID,MACD,GACa,SAAS,GACrB,OAAM,IAAI,MAAM,wDAAwD;AAG1E,UAAO,KAAK,6CAA6C;AACzD,UAAO;WACA,GAAG;AACV,UAAO,MAAM,mCAAmC,IAAI;AACpD,UAAO,MAAM,EAAE;AACf,UAAO;;;;;;;;;CAUX,MAAa,mBAAmB,IAA2C;AACzE,SAAO,KAAK,4BAA4B,GAAG,cAAc,KAAK;AAC9D,MAAI;GACF,MAAM,SAAS,MAAM,KAAK,WAAW;AAGrC,OAAI,GAAG,SAAS;AACd,WAAO,KAAK,0DAA0D;AAgBtE,QAAI,EAfW,MAAM,KAAK,YACxB,GAAG,KAAK,mBAAmB,GAAG,GAAG,QAAQ,0BAA0B,GAAG,WAAW,gBAAgB,GAAG,cAAc,WAClH;KACE,QAAQ,oBAAoB;KAC5B,UAAU,CACR;MACE,QAAQ,EACN,IAAI,QACL;MACD,SAAS,GAAG;MACZ,aAAa,YAAY;MAC1B,CACF;KACF,CACF,GACY,GACX,OAAM,IAAI,MAAM,gEAAgE;;AAKpF,UAAO,KAAK,gCAAgC;GAC5C,MAAM,uBAAuB,MAAM,KAAK,aACtC,GAAG,KAAK,mBAAmB,GAAG,GAAG,QAAQ,0BAA0B,GAAG,WAAW,gBAAgB,GAAG,iBACpG;IACE,QAAQ,kBAAkB;IAC1B,UAAU,EACR,IAAI,QACL;IACF,CACF;AACD,OAAI,sBAAsB,QAAQ,aAAa,KAAK,YAClD,OAAM,IAAI,MAAM,yDAAyD;AAI3E,OAAI,GAAG,oBAAoB;AACzB,WAAO,KAAK,+BAA+B;AAY3C,SAXsB,MAAM,KAAK,YAC/B,GAAG,KAAK,mBAAmB,GAAG,GAAG,QAAQ,0BAA0B,GAAG,WAAW,QACjF,CACE;KACE,MAAM,qBAAqB;KAC3B,aAAa,qBAAqB,sBAAsB;KACxD,aAAa;KACb,UAAU;KACX,CACF,CACF,GACkB,QAAQ,IAAI,YAAY,KACzC,OAAM,IAAI,MAAM,qCAAqC;;AAIzD,UAAO,KAAK,8CAA8C;AAC1D,UAAO;WACA,GAAG;AACV,UAAO,MAAM,mCAAmC,IAAI;AACpD,UAAO,MAAM,EAAE;AACf,UAAO;;;CAIX,MAAc,WACZ,KACA,QACA,aAAqB,wBAAwB,aAC7C;AACA,aAAW,EAAE;EACb,MAAM,cAAc,OAAO,KAAK,OAAO,CACpC,KAAK,QAAQ,GAAG,IAAI,GAAG,OAAO,OAAO,CACrC,KAAK,IAAI;EACZ,MAAM,UAAU,GAAG,IAAI,eAAe,aAAa,cAAc,IAAI,gBAAgB;AAErF,SAAO,MAAM,4BACX,OACA,SACA,QACA,YAAY;AACV,UAAO,MAAM,MAAM,SAAS;IAC1B,QAAQ;IACR,SAAS;KACP,QAAQ;KACR,eAAe,SAAS,OAAO,KAAK,IAAI,KAAK,cAAc,CAAC,SAAS,SAAS;KAC/E;IACF,CAAC;KAEJ,KAAK,MACN;;CAGH,MAAc,YAAY,KAAa,MAAgB,aAAqB,wBAAwB,aAAa;EAC/G,MAAM,UAAU,GAAG,IAAI,eAAe;AACtC,SAAO,MAAM,4BACX,QACA,SACA,MACA,YAAY;AACV,UAAO,MAAM,MAAM,SAAS;IAC1B,QAAQ;IACR,SAAS;KACP,gBAAgB;KAChB,eAAe,SAAS,OAAO,KAAK,IAAI,KAAK,cAAc,CAAC,SAAS,SAAS;KAC/E;IACD,MAAM,KAAK,UAAU,KAAK;IAC3B,CAAC;KAEJ,KAAK,MACN;;CAGH,MAAc,WAAW,KAAa,MAAgB,aAAqB,wBAAwB,aAAa;EAC9G,MAAM,UAAU,GAAG,IAAI,eAAe;AACtC,SAAO,MAAM,4BACX,OACA,SACA,MACA,YAAY;AACV,UAAO,MAAM,MAAM,SAAS;IAC1B,QAAQ;IACR,SAAS;KACP,gBAAgB;KAChB,eAAe,SAAS,OAAO,KAAK,IAAI,KAAK,cAAc,CAAC,SAAS,SAAS;KAC/E;IACD,MAAM,KAAK,UAAU,KAAK;IAC3B,CAAC;KAEJ,KAAK,MACN;;CAGH,MAAc,aACZ,KACA,MACA,aACA,aAAqB,wBAAwB,aAC7C;EACA,MAAM,UAAU,GAAG,IAAI,eAAe;AACtC,SAAO,MAAM,4BACX,SACA,SACA,MACA,YAAY;AACV,UAAO,MAAM,MAAM,SAAS;IAC1B,QAAQ;IACR,SAAS;KACP,gBAAgB,eAAe;KAC/B,eAAe,SAAS,OAAO,KAAK,IAAI,KAAK,cAAc,CAAC,SAAS,SAAS;KAC/E;IACD,MAAM,KAAK,UAAU,KAAK;IAC3B,CAAC;KAEJ,KAAK,MACN;;;AAIL,SAAS,mBAAmB,IAAY,OAAe,aAA6B;AAoBlF,QAAO,aAAa,GAAG,IAAI,MAAM,MAAM,cAAc,MAAM,GAAG,KAAK;;AAGrE,SAAS,OAAO,MAAuB;AAErC,QADc,gFACD,KAAK,KAAK;;AAGzB,SAAS,kBAAkB,oBAAoC;CAC7D,MAAM,MAAM,IAAI,IAAI,mBAAmB;CACvC,MAAM,WAAW,IAAI,SAAS,aAAa;AAG3C,KAAI,aAAa,mBAAmB,SAAS,SAAS,oBAAoB,CACxE,KAAI,OAAO;AAEb,QAAO,IAAI,UAAU;;AAGvB,eAAsB,4BACpB,QACA,KACA,SACA,cACA,UAAmB,OACnB,aAAqB,GACrB,aAAqB,KACrB;CACA,IAAIC;AACJ,KAAI;AAEF,MAAI,QAAS,QAAO,MAAM,UAAU,OAAO,IAAI,MAAM;EACrD,MAAM,WAAW,MAAM,cAAc;AACrC,SAAO,MAAM,SAAS,MAAM;EAC5B,MAAM,EAAE,QAAQ,YAAY,YAAY,kBAAkB;AAC1D,MAAI,QAAS,QAAO,MAAM,UAAU,WAAW,IAAI,gBAAgB;AAGnE,MAAI,aAAa,OAAO,aAAa,IACnC,OAAM,IAAI,iBAAiB,QAAQ,OAAO,IAAI,IAAI,YAAY,WAAW,GAAG,iBAAiB,WAAW;AAI1G,SAAO,KAAK,MAAM,KAAK;UAChB,GAAG;EACV,MAAM,MAAM;AAEZ,MAAI,aAAa,KAAK,wBAAwB,IAAI,EAAE;AAClD,UAAO,KAAK,IAAI,QAAQ;AACxB,OAAI,QAAS,QAAO,MAAM,yBAAyB,WAAW,OAAO;AACrE,SAAM,IAAI,SAAS,YAAY,WAAW,SAAS,WAAW,CAAC;AAC/D,UAAO,4BAA4B,QAAQ,KAAK,SAAS,cAAc,SAAS,aAAa,GAAG,WAAW;;AAI7G,MAAI,SAAS;AACX,OAAI,QACF,QAAO,MAAM,YAAY,KAAK,UAAU,QAAQ,GAAG;AAErD,OAAI,KACF,QAAO,MAAM,aAAa,OAAO;;AAIrC,SAAO,MAAM,QAAQ,IAAI;AACzB,QAAM;;;;;;;;;;;;;;;ACttBV,eAAsB,oBAAoB,EACxC,KACA,OACA,QACA,UAAU,QAAQ,KAAK,EACvB,kBAU4B;CAC5B,IAAIC;CACJ,IAAIC;AASJ,KAAI,QAAQ;AACV,SAAO,MAAM,0DAA0D;AACvE,OAAK,MAAM,MAAM,4BAA4B;GAE3C,MAAM,aAAa,GAAG,IAAI,QAAQ,IAAI,QAAQ,0BAA0B,IAAI,WAAW,eAAe;AACtG,UAAO,MAAM,OAAO,aAAa;AAEjC,OAAI;IACF,MAAM,aAAa,SAAS,OAAO,KAAK,kBAAkB,QAAQ,CAAC,SAAS,SAAS;IACrF,MAAM,WAAW,MAAM,MAAM,YAAY,EACvC,SAAS;KACP,eAAe;KACf,QAAQ;KACT,EACF,CAAC;AACF,QAAI,SAAS,IAAI;AACf,YAAO,MAAM,gCAAgC,WAAW,GAAG;AAC3D,sBAAiB,MAAM,SAAS,MAAM;AACtC,kBAAa;AACb;eACS,SAAS,WAAW,KAAK;AAClC,YAAO,MAAM,6BAA6B,WAAW,GAAG;AAExD;eACS,SAAS,WAAW,IAC7B,OAAM,IAAI,MAAM,2DAA2D,WAAW,GAAG;aAChF,SAAS,WAAW,IAC7B,OAAM,IAAI,MAAM,kEAAkE,WAAW,GAAG;YAE3F,OAAO;AACd,QAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,eAAe,CAClE,OAAM;QAEN,OAAM;;;OAKZ,MAAK,MAAM,MAAM,4BAA4B;EAC3C,MAAM,WAAW,KAAK,KAAK,SAAS,GAAG;AACvC,MAAI,WAAW,SAAS,EAAE;AACxB,UAAO,MAAM,sCAAsC,WAAW;AAC9D,oBAAiB,MAAM,SAAS,UAAU,QAAQ;AAClD,gBAAa;AACb;QAEA,QAAO,MAAM,mCAAmC,WAAW;;AAMjE,KAAI,CAAC,kBAAkB,CAAC,cAAc,OAAO,mBAAmB,SAC9D,OAAM,IAAI,MAAM,uDAAuD,2BAA2B,KAAK,KAAK,GAAG;KAE/G,QAAO,MAAM,oCAAoC;AAGnD,QAAO,MAAM,sBAAsB;EAAE;EAAgB;EAAY;EAAgB,CAAC;;;;;AC5EpF,SAAgB,uBAAuB,EAAE,mBAA4E;CAEnH,MAAM,QAAQ,IAAI,IAAI,gBAAgB;CACtC,MAAM,WAAW,MAAM,SAAS,MAAM,GAAG,GAAG;CAC5C,IAAI,EAAE,aAAa;AAEnB,KAD6B,wCACJ,KAAK,SAAS,CAAE,YAAW;CAEpD,MAAMC,eAAuB,oBAAoB,gBAAgB;CAEjE,MAAM,mBAAmB,wBAAwB,MAAM;CACvD,MAAM,cAAc,GAAG,SAAS,KAAK,WAAW,MAAM,OAAO,IAAI,MAAM,SAAS,GAAG,GAAG,mBAAmB,GAAG,iBAAiB,KAAK;AAElI,QAAO;EACL;EACA;EACA,gBAAgB;EAChB;EACA,qBAAqB;EACtB;;AAGH,SAAgB,kBAAkB,EAChC,iBACA,WAIwB;CACxB,MAAM,YAAY,uBAAuB,EAAE,iBAAiB,CAAC;CAC7D,MAAM,iBAAiB,UAAU,QAAQ;AAEzC,QAAO;EACL,GAAG;EACH,SAAS;EACV;;AAGH,SAAgB,qBAAqB,EACnC,iBACA,SACA,cAK2B;CAC3B,MAAM,YAAY,kBAAkB;EAAE;EAAiB;EAAS,CAAC;CACjE,MAAM,EAAE,cAAc,qBAAqB,kBAAkB,SAAS,mBAAmB;CAEzF,MAAM,oBAAoB,UAAU,WAAW;CAC/C,MAAM,WAAW,GAAG,mBAAmB,GAAG,iBAAiB,KAAK,KAAK,aAAa,GAAG,eAAe,QAAQ;AAE5G,QAAO;EACL,GAAG;EACH,YAAY;EACZ,mBAAmB;EACpB;;;;;;;;;AAUH,SAAS,oBAAoB,iBAAiC;CAC5D,MAAM,QAAQ,gBAAgB,MAAM,IAAI;AAGxC,KAAI,MAAM,WAAW,EAAG,QAAO,MAAM;AAGrC,KAAI,MAAM,WAAW,EAAG,QAAO,MAAM;AAIrC,KAAI,MAAM,WAAW,EAAG,QAAO,MAAM,GAAI,MAAM,IAAI,CAAC;AAEpD,OAAM,IAAI,MAAM,sDAAsD,gBAAgB,IAAI;;;;;;;;;;;;AAa5F,SAAS,wBAAwB,iBAAsB;CAGrD,MAAMC,SAAO,gBAAgB,SAAS,MAAM,IAAI;AAKhD,QAAOA,OAAK,WAAW,IAAIA,OAAK,KAAM"}

package/dist/dependabot/index.d.ts

@@ -1,3 +0,0 @@
-import { $ as sanitizeRef, $t as DependabotGroup, A as DependabotRequest, At as DependabotProxyConfig, B as makeRandomJobToken, Bt as DependabotSourceProviderSchema, C as DependabotRecordUpdateJobUnknownError, Cn as extractPlaceholder, Ct as DependabotGroupRuleJobSchema, D as DependabotUpdatePullRequest, Dt as DependabotJobFileSchema, E as DependabotUpdateDependencyListSchema, En as GitAuthor, Et as DependabotJobFile, F as createApiServerApp, Ft as DependabotRequirementSourceSchema, G as mapIgnoreConditionsFromDependabotConfigToJobConfig, Gt as DependabotAllowCondition, H as mapCredentials, Ht as FetchedFiles, I as DependabotJobBuilder, It as DependabotSecurityAdvisory, J as mapSourceFromDependabotConfigToJobConfig, Jt as DependabotCommitMessageSchema, K as mapPackageEcosystemToPackageManager, Kt as DependabotAllowConditionSchema, L as DependabotJobBuilderOutput, Lt as DependabotSecurityAdvisorySchema, M as DependabotRequestType, Mt as DependabotRequirement, N as DependabotRequestTypeSchema, Nt as DependabotRequirementSchema, O as DependabotUpdatePullRequestSchema, Ot as DependabotPackageManager, P as DependabotTokenType, Pt as DependabotRequirementSource, Q as getBranchNameForUpdate, Qt as DependabotCooldownSchema, R as DependabotSourceInfo, Rt as DependabotSource, S as DependabotRecordUpdateJobErrorSchema, Sn as convertPlaceholder, St as DependabotGroupRuleJob, T as DependabotUpdateDependencyList, Tn as DEPENDABOT_DEFAULT_AUTHOR_NAME, Tt as DependabotJobConfigSchema, U as mapExperiments, Ut as FileFetcherInput, V as mapAllowedUpdatesFromDependabotConfigToJobConfig, Vt as DependabotSourceSchema, W as mapGroupsFromDependabotConfigToJobConfig, Wt as FileUpdaterInput, X as DEFAULT_EXPERIMENTS, Xt as DependabotConfigSchema, Y as mapVersionStrategyToRequirementsUpdateStrategy, Yt as DependabotConfig, Z as parseExperiments, Zt as DependabotCooldown, _ as DependabotRecordEcosystemMeta, _n as parseDependabotConfig, _t as DependabotExistingPRSchema, a as DependabotDependencyFile, an as DependabotPullRequestBranchName, at as DependabotCommandSchema, b as DependabotRecordEcosystemVersionsSchema, bn as validateConfiguration, bt as DependabotGroupJob, c as DependabotEcosystemMetaSchema, cn as DependabotSchedule, ct as DependabotCondition, d as DependabotIncrementMetric, dn as DependabotUpdateSchema, dt as DependabotCredentialSchema, en as DependabotGroupSchema, et as CertificateAuthority, f as DependabotIncrementMetricSchema, fn as POSSIBLE_CONFIG_FILE_PATHS, ft as DependabotDependency, g as DependabotMetricSchema, gn as VersioningStrategySchema, gt as DependabotExistingPR, h as DependabotMetric, hn as VersioningStrategy, ht as DependabotExistingGroupPRSchema, i as DependabotCreatePullRequestSchema, in as DependabotMultiEcosystemGroupSchema, it as DependabotCommand, j as DependabotRequestSchema, jt as DependabotProxyConfigSchema, k as CreateApiServerAppOptions, kt as DependabotPackageManagerSchema, l as DependabotEcosystemVersionManager, ln as DependabotScheduleSchema, lt as DependabotConditionSchema, m as DependabotMarkAsProcessedSchema, mn as PackageEcosystemSchema, mt as DependabotExistingGroupPR, n as DependabotClosePullRequestSchema, nn as DependabotIgnoreConditionSchema, nt as DependabotAllowed, o as DependabotDependencyFileSchema, on as DependabotRegistry, ot as DependabotCommitOptions, p as DependabotMarkAsProcessed, pn as PackageEcosystem, pt as DependabotDependencySchema, q as mapSecurityAdvisories, qt as DependabotCommitMessage, r as DependabotCreatePullRequest, rn as DependabotMultiEcosystemGroup, rt as DependabotAllowedSchema, s as DependabotEcosystemMeta, sn as DependabotRegistrySchema, st as DependabotCommitOptionsSchema, t as DependabotClosePullRequest, tn as DependabotIgnoreCondition, tt as CertificateAuthoritySchema, u as DependabotEcosystemVersionManagerSchema, un as DependabotUpdate, ut as DependabotCredential, v as DependabotRecordEcosystemMetaSchema, vn as parseRegistries, vt as DependabotExperiments, w as DependabotRecordUpdateJobUnknownErrorSchema, wn as DEPENDABOT_DEFAULT_AUTHOR_EMAIL, wt as DependabotJobConfig, x as DependabotRecordUpdateJobError, xn as VariableFinderFn, xt as DependabotGroupJobSchema, y as DependabotRecordEcosystemVersions, yn as parseUpdates, yt as DependabotExperimentsSchema, z as makeRandomJobId, zt as DependabotSourceProvider } from "../index-VTX2ArLa.js";
-import "../index-CYzMyUeu.js";
-export { CertificateAuthority, CertificateAuthoritySchema, CreateApiServerAppOptions, DEFAULT_EXPERIMENTS, DEPENDABOT_DEFAULT_AUTHOR_EMAIL, DEPENDABOT_DEFAULT_AUTHOR_NAME, DependabotAllowCondition, DependabotAllowConditionSchema, DependabotAllowed, DependabotAllowedSchema, DependabotClosePullRequest, DependabotClosePullRequestSchema, DependabotCommand, DependabotCommandSchema, DependabotCommitMessage, DependabotCommitMessageSchema, DependabotCommitOptions, DependabotCommitOptionsSchema, DependabotCondition, DependabotConditionSchema, DependabotConfig, DependabotConfigSchema, DependabotCooldown, DependabotCooldownSchema, DependabotCreatePullRequest, DependabotCreatePullRequestSchema, DependabotCredential, DependabotCredentialSchema, DependabotDependency, DependabotDependencyFile, DependabotDependencyFileSchema, DependabotDependencySchema, DependabotEcosystemMeta, DependabotEcosystemMetaSchema, DependabotEcosystemVersionManager, DependabotEcosystemVersionManagerSchema, DependabotExistingGroupPR, DependabotExistingGroupPRSchema, DependabotExistingPR, DependabotExistingPRSchema, DependabotExperiments, DependabotExperimentsSchema, DependabotGroup, DependabotGroupJob, DependabotGroupJobSchema, DependabotGroupRuleJob, DependabotGroupRuleJobSchema, DependabotGroupSchema, DependabotIgnoreCondition, DependabotIgnoreConditionSchema, DependabotIncrementMetric, DependabotIncrementMetricSchema, DependabotJobBuilder, DependabotJobBuilderOutput, DependabotJobConfig, DependabotJobConfigSchema, DependabotJobFile, DependabotJobFileSchema, DependabotMarkAsProcessed, DependabotMarkAsProcessedSchema, DependabotMetric, DependabotMetricSchema, DependabotMultiEcosystemGroup, DependabotMultiEcosystemGroupSchema, DependabotPackageManager, DependabotPackageManagerSchema, DependabotProxyConfig, DependabotProxyConfigSchema, DependabotPullRequestBranchName, DependabotRecordEcosystemMeta, DependabotRecordEcosystemMetaSchema, DependabotRecordEcosystemVersions, DependabotRecordEcosystemVersionsSchema, DependabotRecordUpdateJobError, DependabotRecordUpdateJobErrorSchema, DependabotRecordUpdateJobUnknownError, DependabotRecordUpdateJobUnknownErrorSchema, DependabotRegistry, DependabotRegistrySchema, DependabotRequest, DependabotRequestSchema, DependabotRequestType, DependabotRequestTypeSchema, DependabotRequirement, DependabotRequirementSchema, DependabotRequirementSource, DependabotRequirementSourceSchema, DependabotSchedule, DependabotScheduleSchema, DependabotSecurityAdvisory, DependabotSecurityAdvisorySchema, DependabotSource, DependabotSourceInfo, DependabotSourceProvider, DependabotSourceProviderSchema, DependabotSourceSchema, DependabotTokenType, DependabotUpdate, DependabotUpdateDependencyList, DependabotUpdateDependencyListSchema, DependabotUpdatePullRequest, DependabotUpdatePullRequestSchema, DependabotUpdateSchema, FetchedFiles, FileFetcherInput, FileUpdaterInput, GitAuthor, POSSIBLE_CONFIG_FILE_PATHS, PackageEcosystem, PackageEcosystemSchema, VariableFinderFn, VersioningStrategy, VersioningStrategySchema, convertPlaceholder, createApiServerApp, extractPlaceholder, getBranchNameForUpdate, makeRandomJobId, makeRandomJobToken, mapAllowedUpdatesFromDependabotConfigToJobConfig, mapCredentials, mapExperiments, mapGroupsFromDependabotConfigToJobConfig, mapIgnoreConditionsFromDependabotConfigToJobConfig, mapPackageEcosystemToPackageManager, mapSecurityAdvisories, mapSourceFromDependabotConfigToJobConfig, mapVersionStrategyToRequirementsUpdateStrategy, parseDependabotConfig, parseExperiments, parseRegistries, parseUpdates, sanitizeRef, validateConfiguration };

package/dist/dependabot/index.js

@@ -1,6 +0,0 @@
-import "../environment-DX5CD-dD.js";
-import "../logger-bWnHxtAf.js";
-import { A as DependabotScheduleSchema, B as extractPlaceholder, C as DependabotCommitMessageSchema, D as DependabotIgnoreConditionSchema, E as DependabotGroupSchema, F as parseDependabotConfig, I as parseRegistries, L as parseUpdates, M as POSSIBLE_CONFIG_FILE_PATHS, N as PackageEcosystemSchema, O as DependabotMultiEcosystemGroupSchema, P as VersioningStrategySchema, R as validateConfiguration, S as DependabotAllowConditionSchema, T as DependabotCooldownSchema, _ as DependabotRequirementSchema, a as DependabotConditionSchema, b as DependabotSourceProviderSchema, c as DependabotExistingGroupPRSchema, d as DependabotGroupJobSchema, f as DependabotGroupRuleJobSchema, g as DependabotProxyConfigSchema, h as DependabotPackageManagerSchema, i as DependabotCommitOptionsSchema, j as DependabotUpdateSchema, k as DependabotRegistrySchema, l as DependabotExistingPRSchema, m as DependabotJobFileSchema, n as DependabotAllowedSchema, o as DependabotCredentialSchema, p as DependabotJobConfigSchema, r as DependabotCommandSchema, s as DependabotDependencySchema, t as CertificateAuthoritySchema, u as DependabotExperimentsSchema, v as DependabotRequirementSourceSchema, w as DependabotConfigSchema, x as DependabotSourceSchema, y as DependabotSecurityAdvisorySchema, z as convertPlaceholder } from "../job-CxYcRj_D.js";
-import { A as DEFAULT_EXPERIMENTS, C as mapExperiments, D as mapSecurityAdvisories, E as mapPackageEcosystemToPackageManager, F as DEPENDABOT_DEFAULT_AUTHOR_NAME, M as getBranchNameForUpdate, N as sanitizeRef, O as mapSourceFromDependabotConfigToJobConfig, P as DEPENDABOT_DEFAULT_AUTHOR_EMAIL, S as mapCredentials, T as mapIgnoreConditionsFromDependabotConfigToJobConfig, _ as DependabotUpdatePullRequestSchema, a as DependabotCreatePullRequestSchema, b as makeRandomJobToken, c as DependabotEcosystemVersionManagerSchema, d as DependabotMetricSchema, f as DependabotRecordEcosystemMetaSchema, g as DependabotUpdateDependencyListSchema, h as DependabotRecordUpdateJobUnknownErrorSchema, i as DependabotClosePullRequestSchema, j as parseExperiments, k as mapVersionStrategyToRequirementsUpdateStrategy, l as DependabotIncrementMetricSchema, m as DependabotRecordUpdateJobErrorSchema, n as DependabotRequestTypeSchema, o as DependabotDependencyFileSchema, p as DependabotRecordEcosystemVersionsSchema, r as createApiServerApp, s as DependabotEcosystemMetaSchema, t as DependabotRequestSchema, u as DependabotMarkAsProcessedSchema, v as DependabotJobBuilder, w as mapGroupsFromDependabotConfigToJobConfig, x as mapAllowedUpdatesFromDependabotConfigToJobConfig, y as makeRandomJobId } from "../dependabot-B5pw4XDa.js";
-
-export { CertificateAuthoritySchema, DEFAULT_EXPERIMENTS, DEPENDABOT_DEFAULT_AUTHOR_EMAIL, DEPENDABOT_DEFAULT_AUTHOR_NAME, DependabotAllowConditionSchema, DependabotAllowedSchema, DependabotClosePullRequestSchema, DependabotCommandSchema, DependabotCommitMessageSchema, DependabotCommitOptionsSchema, DependabotConditionSchema, DependabotConfigSchema, DependabotCooldownSchema, DependabotCreatePullRequestSchema, DependabotCredentialSchema, DependabotDependencyFileSchema, DependabotDependencySchema, DependabotEcosystemMetaSchema, DependabotEcosystemVersionManagerSchema, DependabotExistingGroupPRSchema, DependabotExistingPRSchema, DependabotExperimentsSchema, DependabotGroupJobSchema, DependabotGroupRuleJobSchema, DependabotGroupSchema, DependabotIgnoreConditionSchema, DependabotIncrementMetricSchema, DependabotJobBuilder, DependabotJobConfigSchema, DependabotJobFileSchema, DependabotMarkAsProcessedSchema, DependabotMetricSchema, DependabotMultiEcosystemGroupSchema, DependabotPackageManagerSchema, DependabotProxyConfigSchema, DependabotRecordEcosystemMetaSchema, DependabotRecordEcosystemVersionsSchema, DependabotRecordUpdateJobErrorSchema, DependabotRecordUpdateJobUnknownErrorSchema, DependabotRegistrySchema, DependabotRequestSchema, DependabotRequestTypeSchema, DependabotRequirementSchema, DependabotRequirementSourceSchema, DependabotScheduleSchema, DependabotSecurityAdvisorySchema, DependabotSourceProviderSchema, DependabotSourceSchema, DependabotUpdateDependencyListSchema, DependabotUpdatePullRequestSchema, DependabotUpdateSchema, POSSIBLE_CONFIG_FILE_PATHS, PackageEcosystemSchema, VersioningStrategySchema, convertPlaceholder, createApiServerApp, extractPlaceholder, getBranchNameForUpdate, makeRandomJobId, makeRandomJobToken, mapAllowedUpdatesFromDependabotConfigToJobConfig, mapCredentials, mapExperiments, mapGroupsFromDependabotConfigToJobConfig, mapIgnoreConditionsFromDependabotConfigToJobConfig, mapPackageEcosystemToPackageManager, mapSecurityAdvisories, mapSourceFromDependabotConfigToJobConfig, mapVersionStrategyToRequirementsUpdateStrategy, parseDependabotConfig, parseExperiments, parseRegistries, parseUpdates, sanitizeRef, validateConfiguration };

package/dist/dependabot-B5pw4XDa.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dependabot-B5pw4XDa.js","names":["branchName: string","crypto","DEFAULT_EXPERIMENTS: DependabotExperiments","updatingPullRequest: boolean","updateDependencyGroupName: string | null","updateDependencyNames: string[] | null","vulnerabilities: SecurityVulnerability[] | undefined","success: boolean"],"sources":["../src/dependabot/author.ts","../src/dependabot/branch-name.ts","../src/dependabot/experiments.ts","../src/dependabot/job-builder.ts","../src/dependabot/update.ts","../src/dependabot/server.ts"],"sourcesContent":["export type GitAuthor = {\n  name: string;\n  email: string;\n};\n\nexport const DEPENDABOT_DEFAULT_AUTHOR_EMAIL = 'noreply@github.com';\nexport const DEPENDABOT_DEFAULT_AUTHOR_NAME = 'dependabot[bot]';\n","import * as crypto from 'node:crypto';\nimport type { PackageEcosystem } from './config';\nimport type { DependabotExistingPR } from './job';\n\n// TODO: figure out how to handle IDENTIFIER field (in a group) in branch naming\n// Docs: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#groups--\n// -> An identifier for a group is used in branch names and pull request titles.\n\nexport function getBranchNameForUpdate(\n  packageEcosystem: PackageEcosystem,\n  targetBranchName: string | undefined,\n  directory: string | undefined,\n  dependencyGroupName: string | undefined,\n  dependencies: DependabotExistingPR[],\n  separator: string = '/',\n): string {\n  // Based on dependabot-core implementation:\n  // https://github.com/dependabot/dependabot-core/blob/main/common/lib/dependabot/pull_request_creator/branch_namer/solo_strategy.rb\n  // https://github.com/dependabot/dependabot-core/blob/main/common/lib/dependabot/pull_request_creator/branch_namer/dependency_group_strategy.rb\n  let branchName: string;\n  const branchNameMightBeTooLong = dependencyGroupName || dependencies.length > 1;\n  if (branchNameMightBeTooLong) {\n    // Group/multi dependency update\n    // e.g. dependabot/nuget/main/microsoft-3b49c54d9e\n    const dependencyDigest = crypto\n      .createHash('md5')\n      .update(dependencies.map((d) => `${d['dependency-name']}-${d['dependency-version']}`).join(','))\n      .digest('hex')\n      .substring(0, 10);\n    branchName = `${dependencyGroupName || 'multi'}-${dependencyDigest}`;\n  } else {\n    // Single dependency update\n    // e.g. dependabot/nuget/main/Microsoft.Extensions.Logging-1.0.0\n    const dependencyNames = dependencies\n      .map((d) => d['dependency-name'])\n      .join('-and-')\n      .replace(/[:[]]/g, '-') // Replace `:` and `[]` with `-`\n      .replace(/@/g, ''); // Remove `@`\n    const versionSuffix = dependencies[0]?.removed ? 'removed' : dependencies[0]?.['dependency-version'];\n    branchName = `${dependencyNames}-${versionSuffix}`;\n  }\n\n  return sanitizeRef(\n    [\n      'dependabot',\n      packageEcosystem,\n      targetBranchName,\n      // normalize directory to remove leading/trailing slashes and replace remaining ones with the separator\n      directory\n        ?.replace(/^\\/+|\\/+$/g, '')\n        .replace(/\\//g, separator),\n      branchName,\n    ],\n    separator,\n  );\n}\n\nexport function sanitizeRef(refParts: (string | undefined)[], separator: string): string {\n  // Based on dependabot-core implementation:\n  // https://github.com/dependabot/dependabot-core/blob/fc31ae64f492dc977cfe6773ab13fb6373aabec4/common/lib/dependabot/pull_request_creator/branch_namer/base.rb#L99\n\n  // This isn't a complete implementation of git's ref validation, but it\n  // covers most cases that crop up. Its list of allowed characters is a\n  // bit stricter than git's, but that's for cosmetic reasons.\n  return (\n    refParts\n      // Join the parts with the separator, ignore empty parts\n      .filter((p) => p && p.trim().length > 0)\n      .join(separator)\n      // Remove forbidden characters (those not already replaced elsewhere)\n      .replace(/[^A-Za-z0-9/\\-_.(){}]/g, '')\n      // Slashes can't be followed by periods\n      .replace(/\\/\\./g, '/dot-')\n      // Squeeze out consecutive periods and slashes\n      .replace(/\\.+/g, '.')\n      .replace(/\\/+/g, '/')\n      // Trailing periods are forbidden\n      .replace(/\\.$/, '')\n  );\n}\n","import type { DependabotExperiments } from './job';\n\n// The default experiments known to be used by the GitHub Dependabot service.\n// This changes often, update as needed by extracting them from a Dependabot GitHub Action run.\n//  e.g. https://github.com/mburumaxwell/dependabot-azure-devops/actions/workflows/dependabot/dependabot-updates\nexport const DEFAULT_EXPERIMENTS: DependabotExperiments = {\n  'record-ecosystem-versions': true,\n  'record-update-job-unknown-error': true,\n  'proxy-cached': true,\n  'move-job-token': true,\n  'dependency-change-validation': true,\n  'enable-file-parser-python-local': true,\n  'npm-fallback-version-above-v6': true,\n  'enable-record-ecosystem-meta': true,\n  'enable-corepack-for-npm-and-yarn': true,\n  'enable-shared-helpers-command-timeout': true,\n  'enable-dependabot-setting-up-cronjob': true,\n  'enable-engine-version-detection': true,\n  'avoid-duplicate-updates-package-json': true,\n  'allow-refresh-for-existing-pr-dependencies': true,\n  'allow-refresh-group-with-all-dependencies': true,\n  'exclude-local-composer-packages': true,\n  'enable-enhanced-error-details-for-updater': true,\n  'gradle-lockfile-updater': true,\n  'enable-exclude-paths-subdirectory-manifest-files': true,\n  'group-membership-enforcement': true,\n  'deprecate-close-command': true,\n  'deprecate-reopen-command': true,\n  'deprecate-merge-command': true,\n  'deprecate-cancel-merge-command': true,\n  'deprecate-squash-merge-command': true,\n};\n\n/**\n * Parses a comma-separated list of key=value pairs representing experiments.\n * @param raw A comma-separated list of key=value pairs representing experiments.\n * @returns A map of experiment names to their values.\n */\nexport function parseExperiments(raw?: string): DependabotExperiments | undefined {\n  return raw\n    ?.split(',')\n    .filter((entry) => entry.trim() !== '') // <-- filter out empty entries\n    .reduce((acc, cur) => {\n      const [key, value] = cur.split('=', 2);\n      acc[key!] = value || true;\n      return acc;\n    }, {} as DependabotExperiments);\n}\n","import type { SecurityVulnerability } from '@/github';\nimport type {\n  DependabotAllowCondition,\n  DependabotConfig,\n  DependabotGroup,\n  DependabotIgnoreCondition,\n  DependabotRegistry,\n  DependabotUpdate,\n  PackageEcosystem,\n  VersioningStrategy,\n} from './config';\nimport type {\n  DependabotAllowed,\n  DependabotCondition,\n  DependabotCredential,\n  DependabotExistingGroupPR,\n  DependabotExistingPR,\n  DependabotExperiments,\n  DependabotGroupJob,\n  DependabotJobConfig,\n  DependabotPackageManager,\n  DependabotSecurityAdvisory,\n  DependabotSource,\n  DependabotSourceProvider,\n} from './job';\n\nexport type DependabotSourceInfo = {\n  provider: DependabotSourceProvider;\n  hostname: string;\n  'api-endpoint': string;\n  'repository-slug': string;\n};\n\nexport type DependabotJobBuilderOutput = {\n  jobId: number;\n  job: DependabotJobConfig;\n  credentials: DependabotCredential[];\n};\n\n/**\n * Class for building dependabot job objects\n */\nexport class DependabotJobBuilder {\n  private readonly config: DependabotConfig;\n  private readonly update: DependabotUpdate;\n  private readonly experiments: DependabotExperiments;\n  private readonly debug: boolean;\n\n  private readonly packageManager: DependabotPackageManager;\n  private readonly source: DependabotSource;\n  private readonly credentials: DependabotCredential[];\n\n  constructor({\n    source,\n    config,\n    update,\n    systemAccessUser,\n    systemAccessToken,\n    githubToken,\n    experiments,\n    debug,\n  }: {\n    source: DependabotSourceInfo;\n    config: DependabotConfig;\n    update: DependabotUpdate;\n    experiments: DependabotExperiments;\n    systemAccessUser?: string;\n    systemAccessToken?: string;\n    githubToken?: string;\n    /** Determines if verbose log messages are logged */\n    debug: boolean;\n  }) {\n    this.config = config;\n    this.update = update;\n    this.experiments = experiments;\n    this.debug = debug;\n\n    this.packageManager = mapPackageEcosystemToPackageManager(update['package-ecosystem']);\n    this.source = mapSourceFromDependabotConfigToJobConfig(source, update);\n    this.credentials = mapCredentials({\n      sourceHostname: source.hostname,\n      systemAccessUser,\n      systemAccessToken,\n      githubToken,\n      registries: config.registries,\n    });\n  }\n\n  /**\n   * Create a dependabot update job that updates nothing, but will discover the dependency list for a package ecosystem\n   */\n  public forDependenciesList({\n    id,\n    command,\n  }: {\n    id?: number;\n    command: DependabotJobConfig['command'];\n  }): DependabotJobBuilderOutput {\n    id ??= makeRandomJobId();\n    return {\n      jobId: id,\n      job: {\n        id: id,\n        command: command,\n        'package-manager': this.packageManager,\n        'updating-a-pull-request': false,\n        dependencies: null,\n        'allowed-updates': [{ 'dependency-type': 'direct', 'update-type': 'all' }],\n        'ignore-conditions': [{ 'dependency-name': '*' }],\n        'security-updates-only': false,\n        'security-advisories': [],\n        source: this.source,\n        'update-subdependencies': false,\n        'existing-pull-requests': [],\n        'existing-group-pull-requests': [],\n        experiments: this.experiments,\n        'requirements-update-strategy': null,\n        'lockfile-only': false,\n        'commit-message-options': {\n          prefix: null,\n          'prefix-development': null,\n          'include-scope': null,\n        },\n        'vendor-dependencies': false,\n        'repo-private': true,\n        debug: this.debug,\n      },\n      credentials: this.credentials,\n    };\n  }\n\n  /**\n   * Create a dependabot update job that updates all dependencies for a package ecosystem\n   */\n  public forUpdate({\n    id,\n    command,\n    dependencyNamesToUpdate,\n    existingPullRequests,\n    pullRequestToUpdate,\n    securityVulnerabilities,\n  }: {\n    id?: number;\n    command: DependabotJobConfig['command'];\n    dependencyNamesToUpdate?: string[];\n    existingPullRequests: (DependabotExistingPR[] | DependabotExistingGroupPR)[];\n    pullRequestToUpdate?: DependabotExistingPR[] | DependabotExistingGroupPR;\n    securityVulnerabilities?: SecurityVulnerability[];\n  }): DependabotJobBuilderOutput {\n    id ??= makeRandomJobId();\n    const securityOnlyUpdate = this.update['open-pull-requests-limit'] === 0;\n\n    let updatingPullRequest: boolean;\n    let updateDependencyGroupName: string | null = null;\n    let updateDependencyNames: string[] | null;\n    let vulnerabilities: SecurityVulnerability[] | undefined;\n\n    if (pullRequestToUpdate) {\n      updatingPullRequest = true;\n      updateDependencyGroupName = Array.isArray(pullRequestToUpdate)\n        ? null\n        : pullRequestToUpdate['dependency-group-name'];\n      updateDependencyNames = (\n        Array.isArray(pullRequestToUpdate) ? pullRequestToUpdate : pullRequestToUpdate.dependencies\n      )?.map((d) => d['dependency-name']);\n      vulnerabilities = securityVulnerabilities?.filter((v) => updateDependencyNames?.includes(v.package.name));\n    } else {\n      updatingPullRequest = false;\n      const names = dependencyNamesToUpdate?.length ? dependencyNamesToUpdate : null;\n      updateDependencyNames =\n        securityOnlyUpdate && names\n          ? names?.filter((d) => securityVulnerabilities?.find((v) => v.package.name === d))\n          : names;\n      vulnerabilities = securityVulnerabilities;\n    }\n\n    return {\n      jobId: id,\n      job: {\n        id: id,\n        command: command,\n        'package-manager': this.packageManager,\n        'updating-a-pull-request': updatingPullRequest || false,\n        'dependency-group-to-refresh': updateDependencyGroupName,\n        'dependency-groups': mapGroupsFromDependabotConfigToJobConfig(this.update.groups),\n        dependencies: updateDependencyNames,\n        'allowed-updates': mapAllowedUpdatesFromDependabotConfigToJobConfig(this.update.allow, securityOnlyUpdate),\n        'ignore-conditions': mapIgnoreConditionsFromDependabotConfigToJobConfig(this.update.ignore),\n        'security-updates-only': securityOnlyUpdate,\n        'security-advisories': mapSecurityAdvisories(vulnerabilities),\n        source: this.source,\n        'update-subdependencies': false,\n        'existing-pull-requests': existingPullRequests.filter((pr) => Array.isArray(pr)),\n        'existing-group-pull-requests': existingPullRequests.filter(\n          (pr): pr is DependabotExistingGroupPR => !Array.isArray(pr),\n        ),\n        'commit-message-options': {\n          prefix: this.update['commit-message']?.prefix ?? null,\n          'prefix-development': this.update['commit-message']?.['prefix-development'] ?? null,\n          'include-scope':\n            this.update['commit-message']?.include?.toLocaleLowerCase()?.trim() === 'scope' ? true : null,\n        },\n        cooldown: this.update.cooldown,\n        experiments: mapExperiments(this.experiments),\n        'reject-external-code':\n          this.update['insecure-external-code-execution']?.toLocaleLowerCase()?.trim() === 'allow',\n        'requirements-update-strategy': mapVersionStrategyToRequirementsUpdateStrategy(\n          this.update['versioning-strategy'],\n        ),\n        'lockfile-only': this.update['versioning-strategy'] === 'lockfile-only',\n        'vendor-dependencies': this.update.vendor ?? false,\n        'repo-private': true,\n        debug: this.debug,\n        'proxy-log-response-body-on-auth-failure': true,\n        'max-updater-run-time': 2700,\n        'enable-beta-ecosystems': this.config['enable-beta-ecosystems'] || false,\n        // Updates across ecosystems is still in development\n        // See https://github.com/dependabot/dependabot-core/issues/8126\n        //     https://github.com/dependabot/dependabot-core/pull/12339\n        // It needs to merged in the core repo first before we support it\n        // However, to match current job configs and to prevent surprises, we disable it\n        'multi-ecosystem-update': false,\n        'exclude-paths': this.update['exclude-paths'],\n      },\n      credentials: this.credentials,\n    };\n  }\n}\n\nexport function mapPackageEcosystemToPackageManager(ecosystem: PackageEcosystem): DependabotPackageManager {\n  // Map the dependabot config \"package ecosystem\" to the equivalent dependabot-core/cli \"package manager\".\n  // Config values: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#package-ecosystem-\n  // Core/CLI values: https://github.com/dependabot/dependabot-core/blob/main/common/lib/dependabot/config/file.rb#L60-L81\n  switch (ecosystem) {\n    case 'docker-compose':\n      return 'docker_compose';\n    case 'dotnet-sdk':\n      return 'dotnet_sdk';\n    case 'github-actions':\n      return 'github_actions';\n    case 'gitsubmodule':\n      return 'submodules';\n    case 'gomod':\n      return 'go_modules';\n    case 'mix':\n      return 'hex';\n    case 'npm':\n      return 'npm_and_yarn';\n    // Additional aliases, sometimes used for convenience\n    case 'pipenv':\n      return 'pip';\n    case 'pip-compile':\n      return 'pip';\n    case 'poetry':\n      return 'pip';\n    case 'pnpm':\n      return 'npm_and_yarn';\n    case 'rust-toolchain':\n      return 'rust_toolchain';\n    case 'yarn':\n      return 'npm_and_yarn';\n    default:\n      return ecosystem;\n  }\n}\n\nexport function mapSourceFromDependabotConfigToJobConfig(\n  source: DependabotSourceInfo,\n  update: DependabotUpdate,\n): DependabotSource {\n  return {\n    provider: source.provider,\n    'api-endpoint': source['api-endpoint'],\n    hostname: source.hostname,\n    repo: source['repository-slug'],\n    branch: update['target-branch'],\n    commit: null, // use latest commit of target branch\n    directory: update.directory,\n    directories: update.directories,\n  };\n}\n\nexport function mapVersionStrategyToRequirementsUpdateStrategy(strategy?: VersioningStrategy): string | null {\n  if (!strategy) return null;\n  switch (strategy) {\n    case 'auto':\n      return null;\n    case 'increase':\n      return 'bump_versions';\n    case 'increase-if-necessary':\n      return 'bump_versions_if_necessary';\n    case 'lockfile-only':\n      return 'lockfile_only';\n    case 'widen':\n      return 'widen_ranges';\n    default:\n      throw new Error(`Invalid dependabot.yaml versioning strategy option '${strategy}'`);\n  }\n}\n\nexport function mapGroupsFromDependabotConfigToJobConfig(\n  dependencyGroups?: Record<string, DependabotGroup | null>,\n): DependabotGroupJob[] {\n  if (!dependencyGroups || !Object.keys(dependencyGroups).length) return [];\n  return Object.keys(dependencyGroups)\n    .filter((name) => dependencyGroups[name])\n    .map((name) => {\n      const group = dependencyGroups[name]!;\n      return {\n        name: name,\n        'applies-to': group['applies-to'],\n        rules: {\n          patterns: group.patterns?.length ? group.patterns : ['*'],\n          'exclude-patterns': group['exclude-patterns'],\n          'dependency-type': group['dependency-type'],\n          'update-types': group['update-types'],\n        },\n      } satisfies DependabotGroupJob;\n    });\n}\n\nexport function mapAllowedUpdatesFromDependabotConfigToJobConfig(\n  allowedUpdates?: DependabotAllowCondition[],\n  securityOnlyUpdate?: boolean,\n): DependabotAllowed[] {\n  // If no allow conditions are specified, update direct dependencies by default; This is what GitHub does.\n  // NOTE: 'update-type' appears to be a deprecated config, but still appears in the dependabot-core model and GitHub Dependabot job logs.\n  //       See: https://github.com/dependabot/dependabot-core/blob/b3a0c1f86c20729494097ebc695067099f5b4ada/updater/lib/dependabot/job.rb#L253C1-L257C78\n  if (!allowedUpdates) {\n    return [\n      {\n        'dependency-type': 'direct',\n        'update-type': securityOnlyUpdate ? 'security' : 'all',\n      },\n    ];\n  }\n  return allowedUpdates.map((allow) => {\n    return {\n      'dependency-name': allow['dependency-name'],\n      'dependency-type': allow['dependency-type'],\n      'update-type': allow['update-type'],\n    };\n  });\n}\n\nexport function mapIgnoreConditionsFromDependabotConfigToJobConfig(\n  ignoreConditions?: DependabotIgnoreCondition[],\n): DependabotCondition[] {\n  if (!ignoreConditions) return [];\n  return ignoreConditions.map((ignore) => {\n    return {\n      source: ignore.source,\n      'updated-at': ignore['updated-at'],\n      'dependency-name': ignore['dependency-name'] ?? '*',\n      'update-types': ignore['update-types'],\n\n      // The dependabot.yml config docs are not very clear about acceptable values; after scanning dependabot-core and dependabot-cli,\n      // this could either be a single version string (e.g. '>1.0.0'), or multiple version strings separated by commas (e.g. '>1.0.0, <2.0.0')\n      'version-requirement': Array.isArray(ignore.versions) ? (<string[]>ignore.versions)?.join(', ') : ignore.versions,\n    } satisfies DependabotCondition;\n  });\n}\n\nexport function mapExperiments(experiments?: DependabotExperiments): DependabotExperiments {\n  experiments ??= {};\n  return Object.keys(experiments).reduce((acc, key) => {\n    // Experiment values are known to be either 'true', 'false', or a string value.\n    // If the value is 'true' or 'false', convert it to a boolean type so that dependabot-core handles it correctly.\n    const value = experiments[key];\n    if (typeof value === 'string' && value?.toLocaleLowerCase() === 'true') {\n      acc[key] = true;\n    } else if (typeof value === 'string' && value?.toLocaleLowerCase() === 'false') {\n      acc[key] = false;\n    } else {\n      if (typeof value === 'string' || typeof value === 'boolean') acc[key] = value;\n    }\n    return acc;\n  }, {} as DependabotExperiments);\n}\n\nexport function mapSecurityAdvisories(securityVulnerabilities?: SecurityVulnerability[]): DependabotSecurityAdvisory[] {\n  if (!securityVulnerabilities) return [];\n\n  // A single security advisory can cause a vulnerability in multiple versions of a package.\n  // We need to map each unique security advisory to a list of affected-versions and patched-versions.\n  const vulnerabilitiesGroupedByPackageNameAndAdvisoryId = new Map<string, SecurityVulnerability[]>();\n  for (const vuln of securityVulnerabilities) {\n    const key = `${vuln.package.name}/${vuln.advisory.identifiers.map((i) => `${i.type}:${i.value}`).join('/')}`;\n    if (!vulnerabilitiesGroupedByPackageNameAndAdvisoryId.has(key)) {\n      vulnerabilitiesGroupedByPackageNameAndAdvisoryId.set(key, []);\n    }\n    vulnerabilitiesGroupedByPackageNameAndAdvisoryId.get(key)!.push(vuln);\n  }\n  return Array.from(vulnerabilitiesGroupedByPackageNameAndAdvisoryId.values()).map((vulns) => {\n    return {\n      'dependency-name': vulns[0]!.package.name,\n      'affected-versions': vulns.map((v) => v.vulnerableVersionRange).filter((v) => v && v.length > 0),\n      'patched-versions': vulns\n        .map((v) => v.firstPatchedVersion?.identifier)\n        .filter((v) => v && v.length > 0)\n        .map((v) => v!),\n      'unaffected-versions': [],\n    } satisfies DependabotSecurityAdvisory;\n  });\n}\n\nexport function mapCredentials({\n  sourceHostname,\n  systemAccessUser,\n  systemAccessToken,\n  githubToken,\n  registries,\n}: {\n  sourceHostname: string;\n  systemAccessUser?: string;\n  systemAccessToken?: string;\n  githubToken?: string;\n  registries?: Record<string, DependabotRegistry>;\n}): DependabotCredential[] {\n  const credentials = [];\n\n  // Required to authenticate with the git repository when cloning the source code\n  if (systemAccessToken) {\n    credentials.push({\n      type: 'git_source',\n      host: sourceHostname,\n      username: (systemAccessUser ?? '').trim()?.length > 0 ? systemAccessUser : 'x-access-token',\n      password: systemAccessToken,\n    });\n  }\n\n  // Required to avoid rate-limiting errors when generating pull request descriptions (e.g. fetching release notes, commit messages, etc)\n  if (githubToken) {\n    credentials.push({\n      type: 'git_source',\n      host: 'github.com',\n      username: 'x-access-token',\n      password: githubToken,\n    });\n  }\n  if (registries) {\n    // TODO: only registries for the current update should be set\n    // Required to authenticate with private package feeds when finding the latest version of dependencies.\n    // The registries have already been worked on (see parseRegistries) so there is no need to do anything else.\n    credentials.push(...Object.values(registries));\n  }\n\n  return credentials;\n}\n\nexport function makeRandomJobId(): number {\n  const array = new Uint32Array(1);\n  crypto.getRandomValues(array);\n  return array[0]! % 10000000000; // Limit to 10 digits to match GitHub's job IDs\n}\n\nexport function makeRandomJobToken() {\n  const array = new Uint8Array(30);\n  crypto.getRandomValues(array);\n  return Array.from(array, (byte) => (byte % 36).toString(36)).join('');\n}\n","import { z } from 'zod/v4';\nimport { DependabotDependencySchema } from './job';\n\n// we use nullish() because it does optional() and allows the value to be set to null\n\nexport const DependabotDependencyFileSchema = z.object({\n  content: z.string(),\n  content_encoding: z.string().nullish(),\n  deleted: z.boolean().nullish(),\n  directory: z.string(),\n  name: z.string(),\n  operation: z.string(), // TODO: convert to enum?\n  support_file: z.boolean().nullish(),\n  symlink_target: z.string().nullish(),\n  type: z.string().nullish(), // TODO: convert to enum?\n  mode: z.string().nullish(),\n});\nexport type DependabotDependencyFile = z.infer<typeof DependabotDependencyFileSchema>;\n\nexport const DependabotUpdateDependencyListSchema = z.object({\n  dependencies: DependabotDependencySchema.array(),\n  dependency_files: z.string().array().nullish(),\n});\nexport type DependabotUpdateDependencyList = z.infer<typeof DependabotUpdateDependencyListSchema>;\n\nexport const DependabotCreatePullRequestSchema = z.object({\n  'base-commit-sha': z.string(),\n  dependencies: DependabotDependencySchema.array(),\n  'updated-dependency-files': DependabotDependencyFileSchema.array(),\n  'pr-title': z.string(),\n  'pr-body': z.string().nullish(),\n  'commit-message': z.string(),\n  'dependency-group': z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotCreatePullRequest = z.infer<typeof DependabotCreatePullRequestSchema>;\n\nexport const DependabotUpdatePullRequestSchema = z.object({\n  'base-commit-sha': z.string(),\n  'dependency-names': z.string().array(),\n  'updated-dependency-files': DependabotDependencyFileSchema.array(),\n  'pr-title': z.string().nullish(), // this is usually excluded when working with dependabot-cli and an empty string if the API\n  'pr-body': z.string().nullish(), // this is usually excluded when working with dependabot-cli and an empty string if the API\n  'commit-message': z.string().nullish(), // this is usually excluded when working with dependabot-cli and an empty string if the API\n  'dependency-group': z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotUpdatePullRequest = z.infer<typeof DependabotUpdatePullRequestSchema>;\n\nexport const DependabotClosePullRequestSchema = z.object({\n  'dependency-names': z.string().array(),\n  reason: z.string().nullish(), // TODO: convert to enum?\n});\nexport type DependabotClosePullRequest = z.infer<typeof DependabotClosePullRequestSchema>;\n\nexport const DependabotMarkAsProcessedSchema = z.object({\n  'base-commit-sha': z.string().nullish(),\n});\nexport type DependabotMarkAsProcessed = z.infer<typeof DependabotMarkAsProcessedSchema>;\n\nexport const DependabotRecordUpdateJobErrorSchema = z.object({\n  'error-type': z.string(),\n  'error-details': z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotRecordUpdateJobError = z.infer<typeof DependabotRecordUpdateJobErrorSchema>;\n\nexport const DependabotRecordUpdateJobUnknownErrorSchema = z.object({\n  'error-type': z.string(),\n  'error-details': z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotRecordUpdateJobUnknownError = z.infer<typeof DependabotRecordUpdateJobUnknownErrorSchema>;\n\nexport const DependabotRecordEcosystemVersionsSchema = z.object({\n  ecosystem_versions: z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotRecordEcosystemVersions = z.infer<typeof DependabotRecordEcosystemVersionsSchema>;\n\nexport const DependabotEcosystemVersionManagerSchema = z.object({\n  name: z.string(),\n  version: z.string(),\n  raw_version: z.string(),\n  requirement: z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotEcosystemVersionManager = z.infer<typeof DependabotEcosystemVersionManagerSchema>;\n\nexport const DependabotEcosystemMetaSchema = z.object({\n  name: z.string(),\n  package_manager: DependabotEcosystemVersionManagerSchema.nullish(),\n  version: DependabotEcosystemVersionManagerSchema.nullish(),\n});\nexport type DependabotEcosystemMeta = z.infer<typeof DependabotEcosystemMetaSchema>;\n\nexport const DependabotRecordEcosystemMetaSchema = z.object({\n  ecosystem: DependabotEcosystemMetaSchema,\n});\nexport type DependabotRecordEcosystemMeta = z.infer<typeof DependabotRecordEcosystemMetaSchema>;\n\nexport const DependabotIncrementMetricSchema = z.object({\n  metric: z.string(),\n  tags: z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotIncrementMetric = z.infer<typeof DependabotIncrementMetricSchema>;\n\nexport const DependabotMetricSchema = z.object({\n  metric: z.string(),\n  type: z.enum(['increment', 'gauge', 'distribution', 'histogram']),\n  value: z.number().nullish(),\n  values: z.number().array().nullish(),\n  tags: z.record(z.string(), z.string()).nullish(),\n});\nexport type DependabotMetric = z.infer<typeof DependabotMetricSchema>;\n","import { zValidator } from '@hono/zod-validator';\nimport { Hono } from 'hono';\nimport { type ZodType, z } from 'zod/v4';\nimport { logger } from '@/logger';\nimport type { DependabotCredential, DependabotJobConfig } from './job';\nimport {\n  DependabotClosePullRequestSchema,\n  DependabotCreatePullRequestSchema,\n  DependabotIncrementMetricSchema,\n  DependabotMarkAsProcessedSchema,\n  DependabotMetricSchema,\n  DependabotRecordEcosystemMetaSchema,\n  DependabotRecordEcosystemVersionsSchema,\n  DependabotRecordUpdateJobErrorSchema,\n  DependabotRecordUpdateJobUnknownErrorSchema,\n  DependabotUpdateDependencyListSchema,\n  DependabotUpdatePullRequestSchema,\n} from './update';\n\nexport const DependabotRequestTypeSchema = z.enum([\n  'create_pull_request',\n  'update_pull_request',\n  'close_pull_request',\n  'record_update_job_error',\n  'record_update_job_unknown_error',\n  'mark_as_processed',\n  'update_dependency_list',\n  'record_ecosystem_versions',\n  'record_ecosystem_meta',\n  'increment_metric',\n  'record_metrics',\n]);\nexport type DependabotRequestType = z.infer<typeof DependabotRequestTypeSchema>;\n\nexport const DependabotRequestSchema = z.discriminatedUnion('type', [\n  z.object({ type: z.literal('create_pull_request'), data: DependabotCreatePullRequestSchema }),\n  z.object({ type: z.literal('update_pull_request'), data: DependabotUpdatePullRequestSchema }),\n  z.object({ type: z.literal('close_pull_request'), data: DependabotClosePullRequestSchema }),\n  z.object({ type: z.literal('record_update_job_error'), data: DependabotRecordUpdateJobErrorSchema }),\n  z.object({ type: z.literal('record_update_job_unknown_error'), data: DependabotRecordUpdateJobUnknownErrorSchema }),\n  z.object({ type: z.literal('mark_as_processed'), data: DependabotMarkAsProcessedSchema }),\n  z.object({ type: z.literal('update_dependency_list'), data: DependabotUpdateDependencyListSchema }),\n  z.object({ type: z.literal('record_ecosystem_versions'), data: DependabotRecordEcosystemVersionsSchema }),\n  z.object({ type: z.literal('record_ecosystem_meta'), data: DependabotRecordEcosystemMetaSchema.array() }),\n  z.object({ type: z.literal('increment_metric'), data: DependabotIncrementMetricSchema }),\n  z.object({ type: z.literal('record_metrics'), data: DependabotMetricSchema.array() }),\n]);\nexport type DependabotRequest = z.infer<typeof DependabotRequestSchema>;\n\nexport type DependabotTokenType = 'job' | 'credentials';\n\n/**\n * Function type for authenticating requests.\n * @param type - The type of authentication ('job' or 'credentials').\n * @param id - The ID of the dependabot job.\n * @param value - The authentication value (e.g., API key).\n * @returns A promise that resolves to a boolean indicating whether the authentication was successful.\n */\ntype AuthenticatorFunc = (type: DependabotTokenType, id: number, value: string) => Promise<boolean>;\n\n/**\n * Handler function for processing dependabot requests.\n * @param id - The ID of the dependabot job.\n * @param request - The dependabot request to handle.\n * @returns A promise that resolves to the result of handling the request.\n */\ntype HandlerFunc = (id: number, request: DependabotRequest) => Promise<boolean>;\n\nexport type CreateApiServerAppOptions = {\n  /**\n   * Base path for the endpoints.\n   * @default `/api/update_jobs`\n   */\n  basePath?: string;\n\n  /** Handler function for authenticating requests. */\n  authenticate: AuthenticatorFunc;\n\n  /** Function for getting a dependabot job by ID. */\n  getJob: (id: number) => Promise<DependabotJobConfig | undefined>;\n\n  /** Function for getting dependabot credentials by job ID. */\n  getCredentials: (id: number) => Promise<DependabotCredential[] | undefined>;\n\n  /** Handler function for processing the operations. */\n  handle: HandlerFunc;\n};\n\n/**\n * Creates an API server application for handling dependabot update jobs.\n * The endpoints in the server application have paths in the format: `/api/update_jobs/:id/{operation}`,\n * where `:id` is the job ID and `{operation}` is one of the defined operations e.g. `create_pull_request`.\n *\n * You should set the job endpoint URL in the job container to\n * `http://<host>:<port>/api/update_jobs/:id` where `<host>` and `<port>` are the host and port\n *\n * These endpoints are protected using the provided API key.\n * @param params - The parameters for creating the API server application.\n * @returns The created API server application.\n */\nexport function createApiServerApp({\n  basePath = `/api/update_jobs`,\n  authenticate,\n  getJob,\n  getCredentials,\n  handle,\n}: CreateApiServerAppOptions): Hono {\n  // Setup app with base path and middleware\n  const app = new Hono().basePath(basePath);\n\n  // Handle endpoints:\n  // - POST  request to /create_pull_request\n  // - POST  request to /update_pull_request\n  // - POST  request to /close_pull_request\n  // - POST  request to /record_update_job_error\n  // - POST  request to /record_update_job_unknown_error\n  // - PATCH request to /mark_as_processed\n  // - POST  request to /update_dependency_list\n  // - POST  request to /record_ecosystem_versions\n  // - POST  request to /record_ecosystem_meta\n  // - POST  request to /increment_metric\n\n  function operation<T extends ZodType>(type: DependabotRequestType, schema: T, method?: string) {\n    app.on(\n      method || 'post',\n      `/:id/${type}`,\n      zValidator('param', z.object({ id: z.coerce.number() })),\n      async (context, next) => {\n        /**\n         * Do not authenticate in scenarios where the server is not using HTTPS because the\n         * dependabot proxy will not send the job token over HTTP, yet trying to get HTTPS to work\n         * with localhost (self-signed certs) against docker (host.docker.internal) is complicated.\n         */\n        const url = new URL(context.req.url);\n        const isHTTPS = url.protocol === 'https:';\n        if (isHTTPS) {\n          const { id } = context.req.valid('param');\n          const value = context.req.header('Authorization');\n          if (!value) return context.body(null, 401);\n          const valid = await authenticate('job', id, value);\n          if (!valid) return context.body(null, 403);\n        } else {\n          logger.trace(`Skipping authentication because it is not secure ${context.req.url}`);\n        }\n        await next();\n      },\n      zValidator('json', z.object({ data: schema })),\n      async (context) => {\n        const { id } = context.req.valid('param');\n        const { data } = context.req.valid('json') as { data: z.infer<typeof schema> };\n        // biome-ignore lint/suspicious/noExplicitAny: generic\n        const success: boolean = await handle(id, { type, data: data as any });\n        return context.body(null, success ? 204 : 400);\n      },\n    );\n  }\n\n  operation('create_pull_request', DependabotCreatePullRequestSchema);\n  operation('update_pull_request', DependabotUpdatePullRequestSchema);\n  operation('close_pull_request', DependabotClosePullRequestSchema);\n  operation('record_update_job_error', DependabotRecordUpdateJobErrorSchema);\n  operation('record_update_job_unknown_error', DependabotRecordUpdateJobUnknownErrorSchema);\n  operation('mark_as_processed', DependabotMarkAsProcessedSchema, 'patch');\n  operation('update_dependency_list', DependabotUpdateDependencyListSchema);\n  operation('record_ecosystem_versions', DependabotRecordEcosystemVersionsSchema);\n  operation('record_ecosystem_meta', DependabotRecordEcosystemMetaSchema.array());\n  operation('increment_metric', DependabotIncrementMetricSchema);\n  operation('record_metrics', DependabotMetricSchema.array());\n\n  // Handle endpoints:\n  // - GET request to /details\n  // - GET request to /credentials\n  app.on(\n    'get',\n    '/:id/details',\n    zValidator('param', z.object({ id: z.coerce.number() })),\n    async (context, next) => {\n      const { id } = context.req.valid('param');\n      const value = context.req.header('Authorization');\n      if (!value) return context.body(null, 401);\n      const valid = await authenticate('job', id, value);\n      if (!valid) return context.body(null, 403);\n      await next();\n    },\n    async (context) => {\n      const { id } = context.req.valid('param');\n      const job = await getJob(id);\n      if (!job) return context.body(null, 204);\n      return context.json(job);\n    },\n  );\n  app.on(\n    'get',\n    '/:id/credentials',\n    zValidator('param', z.object({ id: z.coerce.number() })),\n    async (context, next) => {\n      const { id } = context.req.valid('param');\n      const value = context.req.header('Authorization');\n      if (!value) return context.body(null, 401);\n      const valid = await authenticate('credentials', id, value);\n      if (!valid) return context.body(null, 403);\n      await next();\n    },\n    async (context) => {\n      const { id } = context.req.valid('param');\n      const credentials = await getCredentials(id);\n      if (!credentials) return context.body(null, 204);\n      return context.json(credentials);\n    },\n  );\n\n  return app;\n}\n"],"mappings":";;;;;;;;AAKA,MAAa,kCAAkC;AAC/C,MAAa,iCAAiC;;;;ACE9C,SAAgB,uBACd,kBACA,kBACA,WACA,qBACA,cACA,YAAoB,KACZ;CAIR,IAAIA;AAEJ,KADiC,uBAAuB,aAAa,SAAS,GAChD;EAG5B,MAAM,mBAAmBC,SACtB,WAAW,MAAM,CACjB,OAAO,aAAa,KAAK,MAAM,GAAG,EAAE,mBAAmB,GAAG,EAAE,wBAAwB,CAAC,KAAK,IAAI,CAAC,CAC/F,OAAO,MAAM,CACb,UAAU,GAAG,GAAG;AACnB,eAAa,GAAG,uBAAuB,QAAQ,GAAG;OAUlD,cAAa,GANW,aACrB,KAAK,MAAM,EAAE,mBAAmB,CAChC,KAAK,QAAQ,CACb,QAAQ,UAAU,IAAI,CACtB,QAAQ,MAAM,GAAG,CAEY,GADV,aAAa,IAAI,UAAU,YAAY,aAAa,KAAK;AAIjF,QAAO,YACL;EACE;EACA;EACA;EAEA,WACI,QAAQ,cAAc,GAAG,CAC1B,QAAQ,OAAO,UAAU;EAC5B;EACD,EACD,UACD;;AAGH,SAAgB,YAAY,UAAkC,WAA2B;AAOvF,QACE,SAEG,QAAQ,MAAM,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,CACvC,KAAK,UAAU,CAEf,QAAQ,0BAA0B,GAAG,CAErC,QAAQ,SAAS,QAAQ,CAEzB,QAAQ,QAAQ,IAAI,CACpB,QAAQ,QAAQ,IAAI,CAEpB,QAAQ,OAAO,GAAG;;;;;ACxEzB,MAAaC,sBAA6C;CACxD,6BAA6B;CAC7B,mCAAmC;CACnC,gBAAgB;CAChB,kBAAkB;CAClB,gCAAgC;CAChC,mCAAmC;CACnC,iCAAiC;CACjC,gCAAgC;CAChC,oCAAoC;CACpC,yCAAyC;CACzC,wCAAwC;CACxC,mCAAmC;CACnC,wCAAwC;CACxC,8CAA8C;CAC9C,6CAA6C;CAC7C,mCAAmC;CACnC,6CAA6C;CAC7C,2BAA2B;CAC3B,oDAAoD;CACpD,gCAAgC;CAChC,2BAA2B;CAC3B,4BAA4B;CAC5B,2BAA2B;CAC3B,kCAAkC;CAClC,kCAAkC;CACnC;;;;;;AAOD,SAAgB,iBAAiB,KAAiD;AAChF,QAAO,KACH,MAAM,IAAI,CACX,QAAQ,UAAU,MAAM,MAAM,KAAK,GAAG,CACtC,QAAQ,KAAK,QAAQ;EACpB,MAAM,CAAC,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;AACtC,MAAI,OAAQ,SAAS;AACrB,SAAO;IACN,EAAE,CAA0B;;;;;;;;ACJnC,IAAa,uBAAb,MAAkC;CAChC,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,YAAY,EACV,QACA,QACA,QACA,kBACA,mBACA,aACA,aACA,SAWC;AACD,OAAK,SAAS;AACd,OAAK,SAAS;AACd,OAAK,cAAc;AACnB,OAAK,QAAQ;AAEb,OAAK,iBAAiB,oCAAoC,OAAO,qBAAqB;AACtF,OAAK,SAAS,yCAAyC,QAAQ,OAAO;AACtE,OAAK,cAAc,eAAe;GAChC,gBAAgB,OAAO;GACvB;GACA;GACA;GACA,YAAY,OAAO;GACpB,CAAC;;;;;CAMJ,AAAO,oBAAoB,EACzB,IACA,WAI6B;AAC7B,SAAO,iBAAiB;AACxB,SAAO;GACL,OAAO;GACP,KAAK;IACC;IACK;IACT,mBAAmB,KAAK;IACxB,2BAA2B;IAC3B,cAAc;IACd,mBAAmB,CAAC;KAAE,mBAAmB;KAAU,eAAe;KAAO,CAAC;IAC1E,qBAAqB,CAAC,EAAE,mBAAmB,KAAK,CAAC;IACjD,yBAAyB;IACzB,uBAAuB,EAAE;IACzB,QAAQ,KAAK;IACb,0BAA0B;IAC1B,0BAA0B,EAAE;IAC5B,gCAAgC,EAAE;IAClC,aAAa,KAAK;IAClB,gCAAgC;IAChC,iBAAiB;IACjB,0BAA0B;KACxB,QAAQ;KACR,sBAAsB;KACtB,iBAAiB;KAClB;IACD,uBAAuB;IACvB,gBAAgB;IAChB,OAAO,KAAK;IACb;GACD,aAAa,KAAK;GACnB;;;;;CAMH,AAAO,UAAU,EACf,IACA,SACA,yBACA,sBACA,qBACA,2BAQ6B;AAC7B,SAAO,iBAAiB;EACxB,MAAM,qBAAqB,KAAK,OAAO,gCAAgC;EAEvE,IAAIC;EACJ,IAAIC,4BAA2C;EAC/C,IAAIC;EACJ,IAAIC;AAEJ,MAAI,qBAAqB;AACvB,yBAAsB;AACtB,+BAA4B,MAAM,QAAQ,oBAAoB,GAC1D,OACA,oBAAoB;AACxB,4BACE,MAAM,QAAQ,oBAAoB,GAAG,sBAAsB,oBAAoB,eAC9E,KAAK,MAAM,EAAE,mBAAmB;AACnC,qBAAkB,yBAAyB,QAAQ,MAAM,uBAAuB,SAAS,EAAE,QAAQ,KAAK,CAAC;SACpG;AACL,yBAAsB;GACtB,MAAM,QAAQ,yBAAyB,SAAS,0BAA0B;AAC1E,2BACE,sBAAsB,QAClB,OAAO,QAAQ,MAAM,yBAAyB,MAAM,MAAM,EAAE,QAAQ,SAAS,EAAE,CAAC,GAChF;AACN,qBAAkB;;AAGpB,SAAO;GACL,OAAO;GACP,KAAK;IACC;IACK;IACT,mBAAmB,KAAK;IACxB,2BAA2B,uBAAuB;IAClD,+BAA+B;IAC/B,qBAAqB,yCAAyC,KAAK,OAAO,OAAO;IACjF,cAAc;IACd,mBAAmB,iDAAiD,KAAK,OAAO,OAAO,mBAAmB;IAC1G,qBAAqB,mDAAmD,KAAK,OAAO,OAAO;IAC3F,yBAAyB;IACzB,uBAAuB,sBAAsB,gBAAgB;IAC7D,QAAQ,KAAK;IACb,0BAA0B;IAC1B,0BAA0B,qBAAqB,QAAQ,OAAO,MAAM,QAAQ,GAAG,CAAC;IAChF,gCAAgC,qBAAqB,QAClD,OAAwC,CAAC,MAAM,QAAQ,GAAG,CAC5D;IACD,0BAA0B;KACxB,QAAQ,KAAK,OAAO,mBAAmB,UAAU;KACjD,sBAAsB,KAAK,OAAO,oBAAoB,yBAAyB;KAC/E,iBACE,KAAK,OAAO,mBAAmB,SAAS,mBAAmB,EAAE,MAAM,KAAK,UAAU,OAAO;KAC5F;IACD,UAAU,KAAK,OAAO;IACtB,aAAa,eAAe,KAAK,YAAY;IAC7C,wBACE,KAAK,OAAO,qCAAqC,mBAAmB,EAAE,MAAM,KAAK;IACnF,gCAAgC,+CAC9B,KAAK,OAAO,uBACb;IACD,iBAAiB,KAAK,OAAO,2BAA2B;IACxD,uBAAuB,KAAK,OAAO,UAAU;IAC7C,gBAAgB;IAChB,OAAO,KAAK;IACZ,2CAA2C;IAC3C,wBAAwB;IACxB,0BAA0B,KAAK,OAAO,6BAA6B;IAMnE,0BAA0B;IAC1B,iBAAiB,KAAK,OAAO;IAC9B;GACD,aAAa,KAAK;GACnB;;;AAIL,SAAgB,oCAAoC,WAAuD;AAIzG,SAAQ,WAAR;EACE,KAAK,iBACH,QAAO;EACT,KAAK,aACH,QAAO;EACT,KAAK,iBACH,QAAO;EACT,KAAK,eACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,KAAK,MACH,QAAO;EACT,KAAK,MACH,QAAO;EAET,KAAK,SACH,QAAO;EACT,KAAK,cACH,QAAO;EACT,KAAK,SACH,QAAO;EACT,KAAK,OACH,QAAO;EACT,KAAK,iBACH,QAAO;EACT,KAAK,OACH,QAAO;EACT,QACE,QAAO;;;AAIb,SAAgB,yCACd,QACA,QACkB;AAClB,QAAO;EACL,UAAU,OAAO;EACjB,gBAAgB,OAAO;EACvB,UAAU,OAAO;EACjB,MAAM,OAAO;EACb,QAAQ,OAAO;EACf,QAAQ;EACR,WAAW,OAAO;EAClB,aAAa,OAAO;EACrB;;AAGH,SAAgB,+CAA+C,UAA8C;AAC3G,KAAI,CAAC,SAAU,QAAO;AACtB,SAAQ,UAAR;EACE,KAAK,OACH,QAAO;EACT,KAAK,WACH,QAAO;EACT,KAAK,wBACH,QAAO;EACT,KAAK,gBACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,QACE,OAAM,IAAI,MAAM,uDAAuD,SAAS,GAAG;;;AAIzF,SAAgB,yCACd,kBACsB;AACtB,KAAI,CAAC,oBAAoB,CAAC,OAAO,KAAK,iBAAiB,CAAC,OAAQ,QAAO,EAAE;AACzE,QAAO,OAAO,KAAK,iBAAiB,CACjC,QAAQ,SAAS,iBAAiB,MAAM,CACxC,KAAK,SAAS;EACb,MAAM,QAAQ,iBAAiB;AAC/B,SAAO;GACC;GACN,cAAc,MAAM;GACpB,OAAO;IACL,UAAU,MAAM,UAAU,SAAS,MAAM,WAAW,CAAC,IAAI;IACzD,oBAAoB,MAAM;IAC1B,mBAAmB,MAAM;IACzB,gBAAgB,MAAM;IACvB;GACF;GACD;;AAGN,SAAgB,iDACd,gBACA,oBACqB;AAIrB,KAAI,CAAC,eACH,QAAO,CACL;EACE,mBAAmB;EACnB,eAAe,qBAAqB,aAAa;EAClD,CACF;AAEH,QAAO,eAAe,KAAK,UAAU;AACnC,SAAO;GACL,mBAAmB,MAAM;GACzB,mBAAmB,MAAM;GACzB,eAAe,MAAM;GACtB;GACD;;AAGJ,SAAgB,mDACd,kBACuB;AACvB,KAAI,CAAC,iBAAkB,QAAO,EAAE;AAChC,QAAO,iBAAiB,KAAK,WAAW;AACtC,SAAO;GACL,QAAQ,OAAO;GACf,cAAc,OAAO;GACrB,mBAAmB,OAAO,sBAAsB;GAChD,gBAAgB,OAAO;GAIvB,uBAAuB,MAAM,QAAQ,OAAO,SAAS,GAAc,OAAO,UAAW,KAAK,KAAK,GAAG,OAAO;GAC1G;GACD;;AAGJ,SAAgB,eAAe,aAA4D;AACzF,iBAAgB,EAAE;AAClB,QAAO,OAAO,KAAK,YAAY,CAAC,QAAQ,KAAK,QAAQ;EAGnD,MAAM,QAAQ,YAAY;AAC1B,MAAI,OAAO,UAAU,YAAY,OAAO,mBAAmB,KAAK,OAC9D,KAAI,OAAO;WACF,OAAO,UAAU,YAAY,OAAO,mBAAmB,KAAK,QACrE,KAAI,OAAO;WAEP,OAAO,UAAU,YAAY,OAAO,UAAU,UAAW,KAAI,OAAO;AAE1E,SAAO;IACN,EAAE,CAA0B;;AAGjC,SAAgB,sBAAsB,yBAAiF;AACrH,KAAI,CAAC,wBAAyB,QAAO,EAAE;CAIvC,MAAM,mEAAmD,IAAI,KAAsC;AACnG,MAAK,MAAM,QAAQ,yBAAyB;EAC1C,MAAM,MAAM,GAAG,KAAK,QAAQ,KAAK,GAAG,KAAK,SAAS,YAAY,KAAK,MAAM,GAAG,EAAE,KAAK,GAAG,EAAE,QAAQ,CAAC,KAAK,IAAI;AAC1G,MAAI,CAAC,iDAAiD,IAAI,IAAI,CAC5D,kDAAiD,IAAI,KAAK,EAAE,CAAC;AAE/D,mDAAiD,IAAI,IAAI,CAAE,KAAK,KAAK;;AAEvE,QAAO,MAAM,KAAK,iDAAiD,QAAQ,CAAC,CAAC,KAAK,UAAU;AAC1F,SAAO;GACL,mBAAmB,MAAM,GAAI,QAAQ;GACrC,qBAAqB,MAAM,KAAK,MAAM,EAAE,uBAAuB,CAAC,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAE;GAChG,oBAAoB,MACjB,KAAK,MAAM,EAAE,qBAAqB,WAAW,CAC7C,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAE,CAChC,KAAK,MAAM,EAAG;GACjB,uBAAuB,EAAE;GAC1B;GACD;;AAGJ,SAAgB,eAAe,EAC7B,gBACA,kBACA,mBACA,aACA,cAOyB;CACzB,MAAM,cAAc,EAAE;AAGtB,KAAI,kBACF,aAAY,KAAK;EACf,MAAM;EACN,MAAM;EACN,WAAW,oBAAoB,IAAI,MAAM,EAAE,SAAS,IAAI,mBAAmB;EAC3E,UAAU;EACX,CAAC;AAIJ,KAAI,YACF,aAAY,KAAK;EACf,MAAM;EACN,MAAM;EACN,UAAU;EACV,UAAU;EACX,CAAC;AAEJ,KAAI,WAIF,aAAY,KAAK,GAAG,OAAO,OAAO,WAAW,CAAC;AAGhD,QAAO;;AAGT,SAAgB,kBAA0B;CACxC,MAAM,QAAQ,IAAI,YAAY,EAAE;AAChC,QAAO,gBAAgB,MAAM;AAC7B,QAAO,MAAM,KAAM;;AAGrB,SAAgB,qBAAqB;CACnC,MAAM,QAAQ,IAAI,WAAW,GAAG;AAChC,QAAO,gBAAgB,MAAM;AAC7B,QAAO,MAAM,KAAK,QAAQ,UAAU,OAAO,IAAI,SAAS,GAAG,CAAC,CAAC,KAAK,GAAG;;;;;ACtcvE,MAAa,iCAAiC,EAAE,OAAO;CACrD,SAAS,EAAE,QAAQ;CACnB,kBAAkB,EAAE,QAAQ,CAAC,SAAS;CACtC,SAAS,EAAE,SAAS,CAAC,SAAS;CAC9B,WAAW,EAAE,QAAQ;CACrB,MAAM,EAAE,QAAQ;CAChB,WAAW,EAAE,QAAQ;CACrB,cAAc,EAAE,SAAS,CAAC,SAAS;CACnC,gBAAgB,EAAE,QAAQ,CAAC,SAAS;CACpC,MAAM,EAAE,QAAQ,CAAC,SAAS;CAC1B,MAAM,EAAE,QAAQ,CAAC,SAAS;CAC3B,CAAC;AAGF,MAAa,uCAAuC,EAAE,OAAO;CAC3D,cAAc,2BAA2B,OAAO;CAChD,kBAAkB,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CAC/C,CAAC;AAGF,MAAa,oCAAoC,EAAE,OAAO;CACxD,mBAAmB,EAAE,QAAQ;CAC7B,cAAc,2BAA2B,OAAO;CAChD,4BAA4B,+BAA+B,OAAO;CAClE,YAAY,EAAE,QAAQ;CACtB,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,kBAAkB,EAAE,QAAQ;CAC5B,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CAC5D,CAAC;AAGF,MAAa,oCAAoC,EAAE,OAAO;CACxD,mBAAmB,EAAE,QAAQ;CAC7B,oBAAoB,EAAE,QAAQ,CAAC,OAAO;CACtC,4BAA4B,+BAA+B,OAAO;CAClE,YAAY,EAAE,QAAQ,CAAC,SAAS;CAChC,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,kBAAkB,EAAE,QAAQ,CAAC,SAAS;CACtC,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CAC5D,CAAC;AAGF,MAAa,mCAAmC,EAAE,OAAO;CACvD,oBAAoB,EAAE,QAAQ,CAAC,OAAO;CACtC,QAAQ,EAAE,QAAQ,CAAC,SAAS;CAC7B,CAAC;AAGF,MAAa,kCAAkC,EAAE,OAAO,EACtD,mBAAmB,EAAE,QAAQ,CAAC,SAAS,EACxC,CAAC;AAGF,MAAa,uCAAuC,EAAE,OAAO;CAC3D,cAAc,EAAE,QAAQ;CACxB,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CACzD,CAAC;AAGF,MAAa,8CAA8C,EAAE,OAAO;CAClE,cAAc,EAAE,QAAQ;CACxB,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CACzD,CAAC;AAGF,MAAa,0CAA0C,EAAE,OAAO,EAC9D,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS,EAC5D,CAAC;AAGF,MAAa,0CAA0C,EAAE,OAAO;CAC9D,MAAM,EAAE,QAAQ;CAChB,SAAS,EAAE,QAAQ;CACnB,aAAa,EAAE,QAAQ;CACvB,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CACrD,CAAC;AAGF,MAAa,gCAAgC,EAAE,OAAO;CACpD,MAAM,EAAE,QAAQ;CAChB,iBAAiB,wCAAwC,SAAS;CAClE,SAAS,wCAAwC,SAAS;CAC3D,CAAC;AAGF,MAAa,sCAAsC,EAAE,OAAO,EAC1D,WAAW,+BACZ,CAAC;AAGF,MAAa,kCAAkC,EAAE,OAAO;CACtD,QAAQ,EAAE,QAAQ;CAClB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CAC9C,CAAC;AAGF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,QAAQ,EAAE,QAAQ;CAClB,MAAM,EAAE,KAAK;EAAC;EAAa;EAAS;EAAgB;EAAY,CAAC;CACjE,OAAO,EAAE,QAAQ,CAAC,SAAS;CAC3B,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CACpC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,SAAS;CACjD,CAAC;;;;ACxFF,MAAa,8BAA8B,EAAE,KAAK;CAChD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAa,0BAA0B,EAAE,mBAAmB,QAAQ;CAClE,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,sBAAsB;EAAE,MAAM;EAAmC,CAAC;CAC7F,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,sBAAsB;EAAE,MAAM;EAAmC,CAAC;CAC7F,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,qBAAqB;EAAE,MAAM;EAAkC,CAAC;CAC3F,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,0BAA0B;EAAE,MAAM;EAAsC,CAAC;CACpG,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,kCAAkC;EAAE,MAAM;EAA6C,CAAC;CACnH,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,oBAAoB;EAAE,MAAM;EAAiC,CAAC;CACzF,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,yBAAyB;EAAE,MAAM;EAAsC,CAAC;CACnG,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,4BAA4B;EAAE,MAAM;EAAyC,CAAC;CACzG,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,wBAAwB;EAAE,MAAM,oCAAoC,OAAO;EAAE,CAAC;CACzG,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,mBAAmB;EAAE,MAAM;EAAiC,CAAC;CACxF,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,iBAAiB;EAAE,MAAM,uBAAuB,OAAO;EAAE,CAAC;CACtF,CAAC;;;;;;;;;;;;;AAsDF,SAAgB,mBAAmB,EACjC,WAAW,oBACX,cACA,QACA,gBACA,UACkC;CAElC,MAAM,MAAM,IAAI,MAAM,CAAC,SAAS,SAAS;CAczC,SAAS,UAA6B,MAA6B,QAAW,QAAiB;AAC7F,MAAI,GACF,UAAU,QACV,QAAQ,QACR,WAAW,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,QAAQ,EAAE,CAAC,CAAC,EACxD,OAAO,SAAS,SAAS;AAQvB,OAFY,IAAI,IAAI,QAAQ,IAAI,IAAI,CAChB,aAAa,UACpB;IACX,MAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,QAAQ;IACzC,MAAM,QAAQ,QAAQ,IAAI,OAAO,gBAAgB;AACjD,QAAI,CAAC,MAAO,QAAO,QAAQ,KAAK,MAAM,IAAI;AAE1C,QAAI,CADU,MAAM,aAAa,OAAO,IAAI,MAAM,CACtC,QAAO,QAAQ,KAAK,MAAM,IAAI;SAE1C,QAAO,MAAM,oDAAoD,QAAQ,IAAI,MAAM;AAErF,SAAM,MAAM;KAEd,WAAW,QAAQ,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,CAAC,EAC9C,OAAO,YAAY;GACjB,MAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,QAAQ;GACzC,MAAM,EAAE,SAAS,QAAQ,IAAI,MAAM,OAAO;GAE1C,MAAMC,UAAmB,MAAM,OAAO,IAAI;IAAE;IAAY;IAAa,CAAC;AACtE,UAAO,QAAQ,KAAK,MAAM,UAAU,MAAM,IAAI;IAEjD;;AAGH,WAAU,uBAAuB,kCAAkC;AACnE,WAAU,uBAAuB,kCAAkC;AACnE,WAAU,sBAAsB,iCAAiC;AACjE,WAAU,2BAA2B,qCAAqC;AAC1E,WAAU,mCAAmC,4CAA4C;AACzF,WAAU,qBAAqB,iCAAiC,QAAQ;AACxE,WAAU,0BAA0B,qCAAqC;AACzE,WAAU,6BAA6B,wCAAwC;AAC/E,WAAU,yBAAyB,oCAAoC,OAAO,CAAC;AAC/E,WAAU,oBAAoB,gCAAgC;AAC9D,WAAU,kBAAkB,uBAAuB,OAAO,CAAC;AAK3D,KAAI,GACF,OACA,gBACA,WAAW,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,QAAQ,EAAE,CAAC,CAAC,EACxD,OAAO,SAAS,SAAS;EACvB,MAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,QAAQ,QAAQ,IAAI,OAAO,gBAAgB;AACjD,MAAI,CAAC,MAAO,QAAO,QAAQ,KAAK,MAAM,IAAI;AAE1C,MAAI,CADU,MAAM,aAAa,OAAO,IAAI,MAAM,CACtC,QAAO,QAAQ,KAAK,MAAM,IAAI;AAC1C,QAAM,MAAM;IAEd,OAAO,YAAY;EACjB,MAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,MAAM,MAAM,OAAO,GAAG;AAC5B,MAAI,CAAC,IAAK,QAAO,QAAQ,KAAK,MAAM,IAAI;AACxC,SAAO,QAAQ,KAAK,IAAI;GAE3B;AACD,KAAI,GACF,OACA,oBACA,WAAW,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,QAAQ,EAAE,CAAC,CAAC,EACxD,OAAO,SAAS,SAAS;EACvB,MAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,QAAQ,QAAQ,IAAI,OAAO,gBAAgB;AACjD,MAAI,CAAC,MAAO,QAAO,QAAQ,KAAK,MAAM,IAAI;AAE1C,MAAI,CADU,MAAM,aAAa,eAAe,IAAI,MAAM,CAC9C,QAAO,QAAQ,KAAK,MAAM,IAAI;AAC1C,QAAM,MAAM;IAEd,OAAO,YAAY;EACjB,MAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,cAAc,MAAM,eAAe,GAAG;AAC5C,MAAI,CAAC,YAAa,QAAO,QAAQ,KAAK,MAAM,IAAI;AAChD,SAAO,QAAQ,KAAK,YAAY;GAEnC;AAED,QAAO"}

package/dist/environment-DX5CD-dD.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"environment-DX5CD-dD.js","names":[],"sources":["../src/environment/git.ts","../src/environment/platform.ts","../src/environment/site-url.ts","../src/environment/index.ts"],"sourcesContent":["/**\n * Retrieves the name of the current Git branch from the environment variables or from Git itself.\n * The priority order for retrieving the branch name is as follows:\n * 1. `process.env.GITHUB_REF_NAME`\n * 2. `process.env.VERCEL_GIT_COMMIT_REF`\n * 3. `process.env.CF_PAGES_BRANCH`\n * 4. Retrieve the branch name from Git using the `getBranchFromGit` function.\n * @returns The name of the current Git branch, or undefined if it cannot be determined.\n */\nexport function getBranch(): string | undefined {\n  // GITHUB_REF_NAME may change on every build and we do not want the turbo cache to be invalidated on every build\n  return (\n    process.env.GITHUB_REF_NAME ||\n    process.env.VERCEL_GIT_COMMIT_REF ||\n    process.env.CF_PAGES_BRANCH ||\n    getBranchFromGit()\n  );\n}\n\n/**\n * Retrieves the Git SHA (commit hash) from the environment variables or from Git itself.\n * The priority order for retrieving the Git SHA is as follows:\n * 1. `process.env.GITHUB_SHA`\n * 2. `process.env.VERCEL_GIT_COMMIT_SHA`\n * 3. `process.env.CF_PAGES_COMMIT_SHA`\n * 4. Retrieve the SHA from Git using the `getShaFromGit` function.\n * @returns The Git SHA (commit hash) if available, otherwise `undefined`.\n */\nexport function getSha(): string | undefined {\n  // GITHUB_SHA changes on every build and we do not want the turbo cache to be invalidated on every build\n  return (\n    process?.env.GITHUB_SHA || process?.env.VERCEL_GIT_COMMIT_SHA || process?.env.CF_PAGES_COMMIT_SHA || getShaFromGit()\n  );\n}\n\n/**\n * Retrieves the SHA (commit hash) from the Git repository.\n * @returns The SHA (commit hash) as a string, or undefined if it cannot be retrieved.\n */\nfunction getShaFromGit(): string | undefined {\n  try {\n    if (process.env.NEXT_RUNTIME === 'nodejs') {\n      const { execSync } = require('node:child_process');\n      return execSync('git rev-parse HEAD').toString().trim();\n    }\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Retrieves the current branch name from Git.\n * @returns The name of the current branch, or 'unknown' if an error occurs.\n */\nfunction getBranchFromGit(): string | undefined {\n  try {\n    if (process.env.NEXT_RUNTIME === 'nodejs') {\n      const { execSync } = require('node:child_process');\n      return execSync('git rev-parse --abbrev-ref HEAD').toString().trim();\n    }\n  } catch {\n    return undefined;\n  }\n}\n","export type Platform =\n  | 'azure_app_service'\n  | 'azure_container_apps'\n  | 'azure_static_web_app'\n  | 'cloudflare_pages'\n  | 'vercel'\n  | undefined;\n\nexport function getPlatform(): Platform {\n  if (process.env.CONTAINER_APP_ENV_DNS_SUFFIX) return 'azure_container_apps';\n  // SWA is a special case of Azure App Service so we need to check it first\n  else if (process.env.WEBSITE_STATICWEBAPP_RESOURCE_ID) return 'azure_static_web_app';\n  else if (process.env.WEBSITE_HOSTNAME) return 'azure_app_service';\n  else if (process.env.CF_PAGES_URL) return 'cloudflare_pages';\n  else if (process.env.VERCEL_BRANCH_URL) return 'vercel';\n\n  return undefined;\n}\n","interface SiteUrlOptions {\n  /** Whether the current environment is development. */\n  development: boolean;\n\n  /** Whether the current branch is the main branch. */\n  main: boolean;\n\n  /** The default URL to use if no other URL is found. */\n  defaultValue: string;\n}\n\n/**\n * Get the site URL based on the environment variables.\n * @param options - The options to use.\n * @returns The site URL.\n */\nexport function getSiteUrlCombined({ development, main, defaultValue }: SiteUrlOptions) {\n  // if we are in development, use localhost\n  if (development) return `http://localhost:${process.env.PORT || 3000}`;\n\n  // if we are on the main branch, use the known URL\n  if (main) return defaultValue;\n\n  // if we are on Azure ContainerApps, use the provided URL\n  let value = getSiteUrlForAca();\n  if (value && value.length > 0) return value;\n\n  // if we are on Azure App Service, use the provided URL\n  value = getSiteUrlForAppService();\n  if (value && value.length > 0) return value;\n\n  // if we are on Azure Static WebApps, use the provided URL\n  value = getSiteUrlForSwa();\n  if (value && value.length > 0) return value;\n\n  // if we are on Vercel, use the provided URL\n  value = process.env.VERCEL_BRANCH_URL;\n  if (value && value.length > 0) return `https://${value}`;\n\n  // if we are on Cloudflare Pages, use the provided URL\n  value = process.env.CF_PAGES_URL;\n  if (value && value.length > 0) return value;\n\n  return defaultValue; // fallback (edge cases)\n}\n\nexport function getSiteUrlForAca(): string | undefined {\n  /*\n   * Having looked at the available ENV variables when deployed, we can form the URL from\n   * combinations of the following variables:\n   * CONTAINER_APP_ENV_DNS_SUFFIX (e.g. \"jollyplant-9349db20.westeurope.azurecontainerapps.io\")\n   * CONTAINER_APP_NAME (e.g. \"paklo-website\")\n   */\n\n  const suffix = process.env.CONTAINER_APP_ENV_DNS_SUFFIX;\n  const name = process.env.CONTAINER_APP_NAME;\n  if (!suffix || !name) return undefined;\n  return `https://${name}.${suffix}`;\n}\n\nexport function getSiteUrlForAppService(): string | undefined {\n  /*\n   * Environment variables for Azure App Service are documented at\n   * https://learn.microsoft.com/en-us/azure/app-service/reference-app-settings?tabs=kudu%2Cdotnet#app-environment\n   *\n   * WEBSITE_HOSTNAME (e.g. \"paklo-website.azurewebsites.net\")\n   */\n\n  const value = process.env.WEBSITE_HOSTNAME;\n  return value ? `https://${value}` : undefined;\n}\n\nexport function getSiteUrlForSwa(): string | undefined {\n  /*\n   * Having looked at the available ENV variables when deployed to both production and preview environments,\n   * only the WEBSITE_AUTH_V2_CONFIG_JSON has values we can use for this.\n   *\n   * Sample value for production:\n   * {\\\"platform\\\":{\\\"enabled\\\":true},\\\"globalValidation\\\":{\\\"excludedPaths\\\":[\\\"/.swa/health.html\\\"]},\\\"identityProviders\\\":{\\\"azureStaticWebApps\\\":{\\\"registration\\\":{\\\"clientId\\\":\\\"black-bush-020715303.5.azurestaticapps.net\\\"}}},\\\"legacyProperties\\\":{\\\"configVersion\\\":\\\"v2\\\",\\\"legacyVersion\\\":\\\"V2\\\"}}\n   *\n   * Sample value for preview environment (named 331):\n   * {\\\"platform\\\":{\\\"enabled\\\":true},\\\"globalValidation\\\":{\\\"excludedPaths\\\":[\\\"/.swa/health.html\\\"]},\\\"identityProviders\\\":{\\\"azureStaticWebApps\\\":{\\\"registration\\\":{\\\"clientId\\\":\\\"black-bush-020715303-331.westeurope.5.azurestaticapps.net\\\"}}},\\\"legacyProperties\\\":{\\\"configVersion\\\":\\\"v2\\\",\\\"legacyVersion\\\":\\\"V2\\\"}}\n   *\n   * The part we are interested in is the clientId value. We can extract this value and use it as the domain to form the siteUrl.\n   */\n\n  const config = process.env.WEBSITE_AUTH_V2_CONFIG_JSON;\n  const clientIdMatch = config?.match(/\"clientId\":\"([^\"]+)\"/);\n  return clientIdMatch ? `https://${clientIdMatch[1]}` : undefined;\n}\n","import { getBranch, getSha } from './git';\nimport { getPlatform, type Platform } from './platform';\nimport { getSiteUrlCombined } from './site-url';\n\nexport type Environment = {\n  /** The current environment. */\n  name?: 'development' | 'production' | 'test';\n\n  /** Whether the current environment is development. */\n  development: boolean;\n\n  /** Whether the current environment is production. */\n  production: boolean;\n\n  /** Whether the current environment is test. */\n  test: boolean;\n\n  /** The current platform. */\n  platform: Platform;\n\n  /** The current commit SHA. */\n  sha?: string;\n\n  /** The current branch name. */\n  branch?: string;\n\n  /** Whether the current branch is the main branch. */\n  main: boolean;\n};\n\nfunction getEnvironment(): Environment {\n  const env = process.env.NODE_ENV as Environment['name'];\n  const branch = getBranch();\n  const sha = getSha();\n  const platform = getPlatform();\n\n  return {\n    name: env,\n    development: env === 'development',\n    production: env === 'production',\n    test: env === 'test',\n    platform,\n    sha,\n    branch,\n    main: branch === 'main',\n  };\n}\n\nexport const environment = getEnvironment();\n\nexport interface SiteUrlOptions {\n  /** The default URL to use if no other URL is found. */\n  defaultValue: string;\n}\n\nexport function getSiteUrl({ defaultValue }: SiteUrlOptions): string {\n  const { development, main } = environment;\n  return getSiteUrlCombined({ development, main, defaultValue: defaultValue });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AASA,SAAgB,YAAgC;AAE9C,QACE,QAAQ,IAAI,mBACZ,QAAQ,IAAI,yBACZ,QAAQ,IAAI,mBACZ,kBAAkB;;;;;;;;;;;AAatB,SAAgB,SAA6B;AAE3C,QACE,SAAS,IAAI,cAAc,SAAS,IAAI,yBAAyB,SAAS,IAAI,uBAAuB,eAAe;;;;;;AAQxH,SAAS,gBAAoC;AAC3C,KAAI;AACF,MAAI,QAAQ,IAAI,iBAAiB,UAAU;GACzC,MAAM,EAAE,uBAAqB,qBAAqB;AAClD,UAAO,SAAS,qBAAqB,CAAC,UAAU,CAAC,MAAM;;SAEnD;AACN;;;;;;;AAQJ,SAAS,mBAAuC;AAC9C,KAAI;AACF,MAAI,QAAQ,IAAI,iBAAiB,UAAU;GACzC,MAAM,EAAE,uBAAqB,qBAAqB;AAClD,UAAO,SAAS,kCAAkC,CAAC,UAAU,CAAC,MAAM;;SAEhE;AACN;;;;;;ACrDJ,SAAgB,cAAwB;AACtC,KAAI,QAAQ,IAAI,6BAA8B,QAAO;UAE5C,QAAQ,IAAI,iCAAkC,QAAO;UACrD,QAAQ,IAAI,iBAAkB,QAAO;UACrC,QAAQ,IAAI,aAAc,QAAO;UACjC,QAAQ,IAAI,kBAAmB,QAAO;;;;;;;;;;ACEjD,SAAgB,mBAAmB,EAAE,aAAa,MAAM,gBAAgC;AAEtF,KAAI,YAAa,QAAO,oBAAoB,QAAQ,IAAI,QAAQ;AAGhE,KAAI,KAAM,QAAO;CAGjB,IAAI,QAAQ,kBAAkB;AAC9B,KAAI,SAAS,MAAM,SAAS,EAAG,QAAO;AAGtC,SAAQ,yBAAyB;AACjC,KAAI,SAAS,MAAM,SAAS,EAAG,QAAO;AAGtC,SAAQ,kBAAkB;AAC1B,KAAI,SAAS,MAAM,SAAS,EAAG,QAAO;AAGtC,SAAQ,QAAQ,IAAI;AACpB,KAAI,SAAS,MAAM,SAAS,EAAG,QAAO,WAAW;AAGjD,SAAQ,QAAQ,IAAI;AACpB,KAAI,SAAS,MAAM,SAAS,EAAG,QAAO;AAEtC,QAAO;;AAGT,SAAgB,mBAAuC;CAQrD,MAAM,SAAS,QAAQ,IAAI;CAC3B,MAAM,OAAO,QAAQ,IAAI;AACzB,KAAI,CAAC,UAAU,CAAC,KAAM,QAAO;AAC7B,QAAO,WAAW,KAAK,GAAG;;AAG5B,SAAgB,0BAA8C;CAQ5D,MAAM,QAAQ,QAAQ,IAAI;AAC1B,QAAO,QAAQ,WAAW,UAAU;;AAGtC,SAAgB,mBAAuC;CAerD,MAAM,gBADS,QAAQ,IAAI,6BACG,MAAM,uBAAuB;AAC3D,QAAO,gBAAgB,WAAW,cAAc,OAAO;;;;;AC1DzD,SAAS,iBAA8B;CACrC,MAAM,MAAM,QAAQ,IAAI;CACxB,MAAM,SAAS,WAAW;CAC1B,MAAM,MAAM,QAAQ;CACpB,MAAM,WAAW,aAAa;AAE9B,QAAO;EACL,MAAM;EACN,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,MAAM,QAAQ;EACd;EACA;EACA;EACA,MAAM,WAAW;EAClB;;AAGH,MAAa,cAAc,gBAAgB;AAO3C,SAAgB,WAAW,EAAE,gBAAwC;CACnE,MAAM,EAAE,aAAa,SAAS;AAC9B,QAAO,mBAAmB;EAAE;EAAa;EAAoB;EAAc,CAAC"}

package/dist/github/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","names":["results: T2[]","v"],"sources":["../../src/github/client.ts","../../src/github/ghsa.ts"],"sourcesContent":["import { Octokit } from 'octokit';\n\n/**\n * Creates an authenticated GitHub API client using Octokit.\n *\n * @param token - GitHub personal access token or fine-grained token with appropriate permissions\n * @returns Configured Octokit instance ready for API calls\n */\nexport function createGitHubClient({ token }: { token: string }): Octokit {\n  return new Octokit({\n    auth: token,\n    // could add retry here perhaps?\n  });\n}\n","import type { Octokit } from 'octokit';\nimport * as semver from 'semver';\nimport { z } from 'zod/v4';\n\nimport { logger } from '@/logger';\nimport { createGitHubClient } from './client';\n\n// we use nullish() because it does optional() and allows the value to be set to null\n\nconst GHSA_SECURITY_VULNERABILITIES_QUERY = `\n  query($ecosystem: SecurityAdvisoryEcosystem, $package: String) {\n    securityVulnerabilities(first: 100, ecosystem: $ecosystem, package: $package) {\n      nodes {\n        advisory {\n          identifiers {\n            type,\n            value\n          },\n          severity,\n          summary,\n          description,\n          references {\n            url\n          }\n          cvssSeverities {\n            cvssV3 {\n              score\n              vectorString\n            }\n            cvssV4 {\n              score\n              vectorString\n            }\n          }\n          epss {\n            percentage\n            percentile\n          }\n          cwes (first: 100) {\n            nodes {\n              cweId\n              name\n              description\n            }\n          }\n          publishedAt\n          updatedAt\n          withdrawnAt\n          permalink\n        }\n        vulnerableVersionRange\n        firstPatchedVersion {\n          identifier\n        }\n      }\n    }\n  }\n`;\n\nexport const PackageEcosystemSchema = z.enum([\n  'COMPOSER',\n  'ERLANG',\n  'GO',\n  'ACTIONS',\n  'MAVEN',\n  'NPM',\n  'NUGET',\n  'PIP',\n  'PUB',\n  'RUBYGEMS',\n  'RUST',\n  'SWIFT',\n]);\nexport type PackageEcosystem = z.infer<typeof PackageEcosystemSchema>;\n\nexport const PackageSchema = z.object({\n  name: z.string(),\n  version: z.string().nullish(),\n});\nexport type Package = z.infer<typeof PackageSchema>;\n\nexport const SecurityAdvisoryIdentifierSchema = z.enum(['CVE', 'GHSA']);\nexport type SecurityAdvisoryIdentifierType = z.infer<typeof SecurityAdvisoryIdentifierSchema>;\n\nexport const SecurityAdvisorySeveritySchema = z.enum(['LOW', 'MODERATE', 'HIGH', 'CRITICAL']);\nexport type SecurityAdvisorySeverity = z.infer<typeof SecurityAdvisorySeveritySchema>;\n\nconst CweSchema = z.object({\n  cweId: z.string(),\n  name: z.string(),\n  description: z.string(),\n});\n\nconst CvssSchema = z.object({\n  score: z.number(),\n  vectorString: z.string().nullish(),\n});\ntype Cvss = z.infer<typeof CvssSchema>;\n\nexport const SecurityAdvisorySchema = z.object({\n  identifiers: z\n    .object({\n      type: z.union([SecurityAdvisoryIdentifierSchema, z.string()]),\n      value: z.string(),\n    })\n    .array(),\n  severity: SecurityAdvisorySeveritySchema.nullish(),\n  summary: z.string(),\n  description: z.string().nullish(),\n  references: z.object({ url: z.string() }).array().nullish(),\n  cvss: CvssSchema.nullish(),\n  epss: z\n    .object({\n      percentage: z.number().nullish(),\n      percentile: z.number().nullish(),\n    })\n    .nullish(),\n  cwes: CweSchema.array().nullish(),\n  publishedAt: z.string().nullish(),\n  updatedAt: z.string().nullish(),\n  withdrawnAt: z.string().nullish(),\n  permalink: z.string().nullish(),\n});\nexport type SecurityAdvisory = z.infer<typeof SecurityAdvisorySchema>;\n\nconst FirstPatchedVersionSchema = z.object({ identifier: z.string() });\nexport type FirstPatchedVersion = z.infer<typeof FirstPatchedVersionSchema>;\n\nexport const SecurityVulnerabilitySchema = z.object({\n  package: PackageSchema,\n  advisory: SecurityAdvisorySchema,\n  vulnerableVersionRange: z.string(),\n  firstPatchedVersion: FirstPatchedVersionSchema.nullish(),\n});\nexport type SecurityVulnerability = z.infer<typeof SecurityVulnerabilitySchema>;\n\nconst CvssSeveritiesSchema = z.object({\n  cvssV3: CvssSchema.nullish(),\n  cvssV4: CvssSchema.nullish(),\n});\ntype CvssSeverities = z.infer<typeof CvssSeveritiesSchema>;\n\nconst GitHubSecurityVulnerabilitiesResponseSchema = z.object({\n  securityVulnerabilities: z.object({\n    nodes: z\n      .object({\n        advisory: SecurityAdvisorySchema.omit({ cvss: true /* incoming is cvssSeverities */ }).extend({\n          cvssSeverities: CvssSeveritiesSchema,\n          cwes: z.object({ nodes: CweSchema.array() }).nullish(),\n        }),\n        firstPatchedVersion: FirstPatchedVersionSchema.nullish(),\n        vulnerableVersionRange: z.string(),\n      })\n      .array(),\n  }),\n});\ntype GitHubSecurityVulnerabilitiesResponse = z.infer<typeof GitHubSecurityVulnerabilitiesResponseSchema>;\n\nexport function getGhsaPackageEcosystemFromDependabotPackageManager(\n  dependabotPackageManager: string,\n): PackageEcosystem {\n  switch (dependabotPackageManager) {\n    case 'composer':\n      return 'COMPOSER';\n    case 'elm':\n      return 'ERLANG';\n    case 'github_actions':\n      return 'ACTIONS';\n    case 'go_modules':\n      return 'GO';\n    case 'maven':\n      return 'MAVEN';\n    case 'npm_and_yarn':\n      return 'NPM';\n    case 'nuget':\n      return 'NUGET';\n    case 'pip':\n      return 'PIP';\n    case 'pub':\n      return 'PUB';\n    case 'bundler':\n      return 'RUBYGEMS';\n    case 'cargo':\n      return 'RUST';\n    case 'swift':\n      return 'SWIFT';\n    default:\n      throw new Error(`Unknown dependabot package manager: ${dependabotPackageManager}`);\n  }\n}\n\n/**\n * GitHub Security Advisory client\n */\nexport class GitHubSecurityAdvisoryClient {\n  private readonly octokit: Octokit;\n\n  /**\n   * @param token GitHub personal access token with access to the GHSA API\n   */\n  constructor(token: string) {\n    this.octokit = createGitHubClient({ token });\n  }\n\n  /**\n   * Get the list of security vulnerabilities for a given package ecosystem and list of packages\n   * @param packageEcosystem\n   * @param packages\n   */\n  public async getSecurityVulnerabilitiesAsync(\n    packageEcosystem: PackageEcosystem,\n    packages: Package[],\n  ): Promise<SecurityVulnerability[]> {\n    // GitHub API doesn't support querying multiple package at once, so we need to make a request for each package individually.\n    // To speed up the process, we can make the requests in parallel, 100 at a time. We batch the requests to avoid hitting the rate limit too quickly.\n    // https://docs.github.com/en/graphql/overview/rate-limits-and-node-limits-for-the-graphql-api\n    const securityVulnerabilities = await this.batchGraphQueryAsync<Package, SecurityVulnerability>(\n      100,\n      packages,\n      async (pkg) => {\n        const variables = {\n          ecosystem: packageEcosystem,\n          package: pkg.name,\n        };\n\n        function pickCvss(value: CvssSeverities): Cvss | undefined {\n          // Pick the one with a non-zero score\n          if (value.cvssV4 && value.cvssV4.score > 0) return value.cvssV4;\n          if (value.cvssV3 && value.cvssV3.score > 0) return value.cvssV3;\n        }\n\n        try {\n          const response = await this.octokit.graphql<GitHubSecurityVulnerabilitiesResponse>(\n            GHSA_SECURITY_VULNERABILITIES_QUERY,\n            variables,\n          );\n          const parsed = GitHubSecurityVulnerabilitiesResponseSchema.parse(response);\n          const vulnerabilities = parsed.securityVulnerabilities.nodes;\n          return (\n            vulnerabilities\n              ?.filter((v) => v.advisory != null)\n              ?.map(\n                (v) =>\n                  ({\n                    ...v,\n                    package: pkg,\n                    advisory: {\n                      ...v.advisory,\n                      cwes: v.advisory.cwes?.nodes,\n                      cvss: pickCvss(v.advisory.cvssSeverities),\n                    },\n                  }) satisfies SecurityVulnerability,\n              ) || []\n          );\n        } catch (error) {\n          logger.warn(`GHSA GraphQL request failed for package ${pkg.name}: ${error}. Continuing with other packages.`);\n          return [];\n        }\n      },\n    );\n\n    return securityVulnerabilities;\n  }\n\n  /**\n   * Batch requests in parallel to speed up the process when we are forced to do a N+1 query\n   * @param batchSize\n   * @param items\n   * @param action\n   * @returns\n   */\n  private async batchGraphQueryAsync<T1, T2>(batchSize: number, items: T1[], action: (item: T1) => Promise<T2[]>) {\n    const results: T2[] = [];\n    for (let i = 0; i < items.length; i += batchSize) {\n      const batch = items.slice(i, i + batchSize);\n      if (batch?.length) {\n        try {\n          const batchResults = await Promise.all(batch.map(action));\n          if (batchResults?.length) {\n            results.push(...batchResults.flat());\n          }\n        } catch (error) {\n          logger.warn(`Request batch [${i}-${i + batchSize}] failed; The data may be incomplete. ${error}`);\n        }\n      }\n    }\n    return results;\n  }\n}\n\nexport function filterVulnerabilities(securityVulnerabilities: SecurityVulnerability[]): SecurityVulnerability[] {\n  // Filter out vulnerabilities that have been withdrawn or that are not relevant the current version of the package\n  const affectedVulnerabilities = securityVulnerabilities\n    .filter((v) => !v.advisory.withdrawnAt)\n    .filter((v) => {\n      const pkg = v.package;\n      if (!pkg || !pkg.version || !v.vulnerableVersionRange) {\n        return false;\n      }\n\n      /**\n       * The vulnerable version range follows a basic syntax with a few forms:\n       *   `= 0.2.0` denotes a single vulnerable version\n       *   `<= 1.0.8` denotes a version range up to and including the specified version\n       *   `< 0.1.11` denotes a version range up to, but excluding, the specified version\n       *   `>= 4.3.0, < 4.3.5` denotes a version range with a known minimum and maximum version\n       *   `>= 0.0.1` denotes a version range with a known minimum, but no known maximum\n       */\n      const versionRangeRequirements = v.vulnerableVersionRange.split(',').map((v) => v.trim());\n      return versionRangeRequirements.every((r) => pkg.version && semver.satisfies(pkg.version, r));\n    });\n  return affectedVulnerabilities;\n}\n"],"mappings":";;;;;;;;;;;;;AAQA,SAAgB,mBAAmB,EAAE,SAAqC;AACxE,QAAO,IAAI,QAAQ,EACjB,MAAM,OAEP,CAAC;;;;;ACHJ,MAAM,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkD5C,MAAa,yBAAyB,EAAE,KAAK;CAC3C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAa,gBAAgB,EAAE,OAAO;CACpC,MAAM,EAAE,QAAQ;CAChB,SAAS,EAAE,QAAQ,CAAC,SAAS;CAC9B,CAAC;AAGF,MAAa,mCAAmC,EAAE,KAAK,CAAC,OAAO,OAAO,CAAC;AAGvE,MAAa,iCAAiC,EAAE,KAAK;CAAC;CAAO;CAAY;CAAQ;CAAW,CAAC;AAG7F,MAAM,YAAY,EAAE,OAAO;CACzB,OAAO,EAAE,QAAQ;CACjB,MAAM,EAAE,QAAQ;CAChB,aAAa,EAAE,QAAQ;CACxB,CAAC;AAEF,MAAM,aAAa,EAAE,OAAO;CAC1B,OAAO,EAAE,QAAQ;CACjB,cAAc,EAAE,QAAQ,CAAC,SAAS;CACnC,CAAC;AAGF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,aAAa,EACV,OAAO;EACN,MAAM,EAAE,MAAM,CAAC,kCAAkC,EAAE,QAAQ,CAAC,CAAC;EAC7D,OAAO,EAAE,QAAQ;EAClB,CAAC,CACD,OAAO;CACV,UAAU,+BAA+B,SAAS;CAClD,SAAS,EAAE,QAAQ;CACnB,aAAa,EAAE,QAAQ,CAAC,SAAS;CACjC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS;CAC3D,MAAM,WAAW,SAAS;CAC1B,MAAM,EACH,OAAO;EACN,YAAY,EAAE,QAAQ,CAAC,SAAS;EAChC,YAAY,EAAE,QAAQ,CAAC,SAAS;EACjC,CAAC,CACD,SAAS;CACZ,MAAM,UAAU,OAAO,CAAC,SAAS;CACjC,aAAa,EAAE,QAAQ,CAAC,SAAS;CACjC,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,aAAa,EAAE,QAAQ,CAAC,SAAS;CACjC,WAAW,EAAE,QAAQ,CAAC,SAAS;CAChC,CAAC;AAGF,MAAM,4BAA4B,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AAGtE,MAAa,8BAA8B,EAAE,OAAO;CAClD,SAAS;CACT,UAAU;CACV,wBAAwB,EAAE,QAAQ;CAClC,qBAAqB,0BAA0B,SAAS;CACzD,CAAC;AAGF,MAAM,uBAAuB,EAAE,OAAO;CACpC,QAAQ,WAAW,SAAS;CAC5B,QAAQ,WAAW,SAAS;CAC7B,CAAC;AAGF,MAAM,8CAA8C,EAAE,OAAO,EAC3D,yBAAyB,EAAE,OAAO,EAChC,OAAO,EACJ,OAAO;CACN,UAAU,uBAAuB,KAAK,EAAE,MAAM,MAAuC,CAAC,CAAC,OAAO;EAC5F,gBAAgB;EAChB,MAAM,EAAE,OAAO,EAAE,OAAO,UAAU,OAAO,EAAE,CAAC,CAAC,SAAS;EACvD,CAAC;CACF,qBAAqB,0BAA0B,SAAS;CACxD,wBAAwB,EAAE,QAAQ;CACnC,CAAC,CACD,OAAO,EACX,CAAC,EACH,CAAC;AAGF,SAAgB,oDACd,0BACkB;AAClB,SAAQ,0BAAR;EACE,KAAK,WACH,QAAO;EACT,KAAK,MACH,QAAO;EACT,KAAK,iBACH,QAAO;EACT,KAAK,aACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,KAAK,eACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,KAAK,MACH,QAAO;EACT,KAAK,MACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,QACE,OAAM,IAAI,MAAM,uCAAuC,2BAA2B;;;;;;AAOxF,IAAa,+BAAb,MAA0C;CACxC,AAAiB;;;;CAKjB,YAAY,OAAe;AACzB,OAAK,UAAU,mBAAmB,EAAE,OAAO,CAAC;;;;;;;CAQ9C,MAAa,gCACX,kBACA,UACkC;AAiDlC,SA7CgC,MAAM,KAAK,qBACzC,KACA,UACA,OAAO,QAAQ;GACb,MAAM,YAAY;IAChB,WAAW;IACX,SAAS,IAAI;IACd;GAED,SAAS,SAAS,OAAyC;AAEzD,QAAI,MAAM,UAAU,MAAM,OAAO,QAAQ,EAAG,QAAO,MAAM;AACzD,QAAI,MAAM,UAAU,MAAM,OAAO,QAAQ,EAAG,QAAO,MAAM;;AAG3D,OAAI;IACF,MAAM,WAAW,MAAM,KAAK,QAAQ,QAClC,qCACA,UACD;AAGD,WAFe,4CAA4C,MAAM,SAAS,CAC3C,wBAAwB,OAGjD,QAAQ,MAAM,EAAE,YAAY,KAAK,EACjC,KACC,OACE;KACC,GAAG;KACH,SAAS;KACT,UAAU;MACR,GAAG,EAAE;MACL,MAAM,EAAE,SAAS,MAAM;MACvB,MAAM,SAAS,EAAE,SAAS,eAAe;MAC1C;KACF,EACJ,IAAI,EAAE;YAEJ,OAAO;AACd,WAAO,KAAK,2CAA2C,IAAI,KAAK,IAAI,MAAM,mCAAmC;AAC7G,WAAO,EAAE;;IAGd;;;;;;;;;CAYH,MAAc,qBAA6B,WAAmB,OAAa,QAAqC;EAC9G,MAAMA,UAAgB,EAAE;AACxB,OAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,WAAW;GAChD,MAAM,QAAQ,MAAM,MAAM,GAAG,IAAI,UAAU;AAC3C,OAAI,OAAO,OACT,KAAI;IACF,MAAM,eAAe,MAAM,QAAQ,IAAI,MAAM,IAAI,OAAO,CAAC;AACzD,QAAI,cAAc,OAChB,SAAQ,KAAK,GAAG,aAAa,MAAM,CAAC;YAE/B,OAAO;AACd,WAAO,KAAK,kBAAkB,EAAE,GAAG,IAAI,UAAU,wCAAwC,QAAQ;;;AAIvG,SAAO;;;AAIX,SAAgB,sBAAsB,yBAA2E;AAqB/G,QAnBgC,wBAC7B,QAAQ,MAAM,CAAC,EAAE,SAAS,YAAY,CACtC,QAAQ,MAAM;EACb,MAAM,MAAM,EAAE;AACd,MAAI,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,EAAE,uBAC7B,QAAO;AAYT,SADiC,EAAE,uBAAuB,MAAM,IAAI,CAAC,KAAK,QAAMC,IAAE,MAAM,CAAC,CACzD,OAAO,MAAM,IAAI,WAAW,OAAO,UAAU,IAAI,SAAS,EAAE,CAAC;GAC7F"}

package/dist/http-Be3uWaqn.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"http-Be3uWaqn.js","names":["data: Array<MultipartFormDataBodyPart['body']>","list: Buffer[]","headers: Record<string, string>","body: BodyInit | undefined","error: ProblemDetails","code: number"],"sources":["../src/http/headers.ts","../src/http/multipart.ts","../src/http/inner.ts"],"sourcesContent":["export const HEADER_NAME_CONTENT_DISPOSITION = 'Content-Disposition';\nexport const HEADER_NAME_CONTENT_TYPE = 'Content-Type';\nexport const HEADER_NAME_ACCEPT = 'Accept';\nexport const HEADER_NAME_USER_AGENT = 'User-Agent';\nexport const HEADER_NAME_AUTHORIZATION = 'Authorization';\n","import { HEADER_NAME_CONTENT_DISPOSITION, HEADER_NAME_CONTENT_TYPE } from './headers';\n\nexport class MultipartFormDataBody {\n  private type = 'multipart/form-data';\n  private boundary: string = `${Math.random().toString(36).substring(2)}`;\n  private parts: Array<MultipartFormDataBodyPart> = [];\n\n  public async encode(): Promise<Buffer> {\n    if (this.parts.length === 0) {\n      throw new Error('MultipartFormDataBody must have at least one part');\n    }\n\n    const data: Array<MultipartFormDataBodyPart['body']> = [];\n\n    for (const part of this.parts) {\n      // write boundary\n      data.push(`--${this.boundary}\\r\\n`);\n\n      // write headers\n      for (const [key, value] of Object.entries(part.headers)) {\n        data.push(`${key}: ${value}\\r\\n`);\n      }\n      data.push('\\r\\n');\n\n      // write body\n      data.push(part.body);\n      data.push('\\r\\n');\n    }\n\n    data.push(`--${this.boundary}--\\r\\n`);\n\n    const list: Buffer[] = [];\n    for (const item of data) {\n      if (item instanceof File) list.push(Buffer.from(await item.arrayBuffer()));\n      else if (typeof item === 'string') list.push(Buffer.from(item, 'utf8'));\n      else list.push(item);\n    }\n    return Buffer.concat(list);\n  }\n\n  public getBoundary(): string {\n    return this.boundary;\n  }\n\n  public getContentType(): string {\n    return `${this.type}; boundary=${this.boundary}`;\n  }\n\n  public add(name: string, value: string) {\n    const part = createPart(name, value);\n    this.parts.push(part);\n  }\n\n  public addFile(name: string, file: File) {\n    const part = createPart(name, file, file.name, file.type);\n    this.parts.push(part);\n  }\n}\n\ntype MultipartFormDataBodyPart = {\n  name: string;\n  headers: Record<string, string>;\n  body: Buffer | File | string;\n};\n\nfunction createPart(\n  name: string,\n  body: MultipartFormDataBodyPart['body'],\n  filename?: string,\n  contentType?: string,\n): MultipartFormDataBodyPart {\n  const headers: Record<string, string> = {};\n  headers[HEADER_NAME_CONTENT_DISPOSITION] = `form-data; name=\"${name}\"${filename ? `; filename=\"${filename}\"` : ''}`;\n  if (contentType) headers[HEADER_NAME_CONTENT_TYPE] = contentType;\n  return { name, headers, body };\n}\n","import type { ZodType } from 'zod/v4';\n\nimport { environment } from '@/environment';\n\nimport {\n  HEADER_NAME_ACCEPT,\n  HEADER_NAME_AUTHORIZATION,\n  HEADER_NAME_CONTENT_TYPE,\n  HEADER_NAME_USER_AGENT,\n} from './headers';\nimport { MultipartFormDataBody } from './multipart';\nimport type { ProblemDetails } from './problem';\n\nconst defaultUserAgent = `paklo/${environment.sha?.substring(0, 7) ?? 'dogfood'}`;\n\nexport type CreateInnerApiClientOptions = {\n  /**\n   * The base URL to use for the API.\n   * @example 'https://www.paklo.app/api'\n   */\n  baseUrl: string;\n\n  /** The token to use for authentication. This can be a JWT or specialized key. */\n  token?: string;\n};\n\nexport type RequestOptions = {\n  /**\n   * Value for the `User-Agent` header.\n   * This prepends the default value (e.g. `paklo/ab26320`)\n   * which is important when we need to propagate the browser information to the server.\n   */\n  userAgent?: string;\n};\n\nexport type ResourceResponse<T = Record<string, unknown>> = {\n  /** The headers of the response. */\n  headers: Headers;\n\n  /** Whether the request was successful. */\n  successful: boolean;\n\n  /** The status code of the response. */\n  status: number;\n\n  /** The status text of the response. */\n  statusText: string;\n\n  /** The data of the response. */\n  data?: T;\n\n  /** The error of the response. */\n  error?: ProblemDetails;\n};\n\nexport type InnerRequestOptions<T> = RequestOptions & {\n  /**\n   * The base URL to use for the request.\n   * This overrides the default base URL.\n   * @example 'https://www.paklo.app/api'\n   */\n  baseUrl?: string;\n\n  /** Additional headers to use for the request. */\n  headers?: HeadersInit;\n\n  /** The payload to use for the request. */\n  payload?: Record<string, unknown> | MultipartFormDataBody | ReadableStream | XMLHttpRequestBodyInit;\n\n  /** The schema to use when parsing the response. */\n  schema?: ZodType<T>;\n};\n\ntype InnerRequestOptionsComplete<T> = InnerRequestOptions<T> & {\n  /** The method to use for the request. */\n  method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\n\n  /** The URL to use for the request. */\n  url: string;\n};\n\nexport class InnerApiClient {\n  private readonly baseUrl: string;\n  private readonly headers: Headers;\n  private readonly token?: string;\n\n  /**\n   * Create a new API client.\n   * @param options The options to use for the client.\n   */\n  constructor({ baseUrl, token }: CreateInnerApiClientOptions) {\n    this.baseUrl = baseUrl;\n\n    this.headers = new Headers({\n      [HEADER_NAME_ACCEPT]: 'application/json',\n    });\n\n    this.token = token;\n  }\n\n  async get<T>(url: string, options?: InnerRequestOptions<T>) {\n    return this.request<T>({\n      url: this.makeUrl(url, options),\n      method: 'GET',\n      ...options,\n    });\n  }\n\n  async post<T>(url: string, options?: InnerRequestOptions<T>) {\n    return this.request<T>({\n      method: 'POST',\n      url: this.makeUrl(url, options),\n      ...options,\n    });\n  }\n\n  async put<T>(url: string, options?: InnerRequestOptions<T>) {\n    return this.request<T>({\n      method: 'PUT',\n      url: this.makeUrl(url, options),\n      ...options,\n    });\n  }\n\n  async patch<T>(url: string, options?: InnerRequestOptions<T>) {\n    return this.request<T>({\n      method: 'PATCH',\n      url: this.makeUrl(url, options),\n      ...options,\n    });\n  }\n\n  async delete<T>(url: string, options?: InnerRequestOptions<T>) {\n    return this.request<T>({\n      method: 'DELETE',\n      url: this.makeUrl(url, options),\n      ...options,\n    });\n  }\n\n  async request<T>(options: InnerRequestOptionsComplete<T>): Promise<ResourceResponse<T>> {\n    const { method, url, payload, userAgent, headers: additionalHeaders, schema } = options;\n\n    // create headers for the request\n    const headers = new Headers(this.headers);\n    const finalUserAgent = userAgent && userAgent.length > 0 ? `${userAgent} (${defaultUserAgent})` : defaultUserAgent;\n    headers.set(HEADER_NAME_USER_AGENT, finalUserAgent);\n\n    // populate authorization header\n    if (this.token) {\n      headers.set(HEADER_NAME_AUTHORIZATION, `Bearer ${this.token}`);\n    }\n\n    // populate additional headers\n    // biome-ignore-start lint/suspicious/useIterableCallbackReturn: not used\n    if (additionalHeaders) {\n      if (additionalHeaders instanceof Headers) {\n        additionalHeaders.forEach((value, key) => headers.set(key, value as string));\n      } else if (Array.isArray(additionalHeaders)) {\n        additionalHeaders.forEach(([key, value]) => headers.set(key, value));\n      } else {\n        Object.entries(additionalHeaders).forEach(([key, value]) => headers.set(key, value as string));\n      }\n    }\n    // biome-ignore-end lint/suspicious/useIterableCallbackReturn: not used\n\n    // prepare body\n    let body: BodyInit | undefined;\n    if (skipSerialization(payload)) body = payload;\n    else if (payload instanceof MultipartFormDataBody) {\n      body = new Uint8Array(await payload.encode());\n      headers.set(HEADER_NAME_CONTENT_TYPE, payload.getContentType());\n    } else {\n      body = JSON.stringify(payload);\n      headers.set(HEADER_NAME_CONTENT_TYPE, 'application/json');\n    }\n\n    // make request\n    try {\n      const response = await fetch(url, { method, headers, body });\n      const { ok: successful, status, statusText } = response;\n\n      if (!successful) {\n        try {\n          const rawError = await response.text();\n          return { headers: response.headers, successful, status, statusText, error: JSON.parse(rawError) };\n        } catch (err) {\n          if (err instanceof SyntaxError) {\n            return {\n              headers: response.headers,\n              successful,\n              status,\n              statusText,\n              error: {\n                title: 'Unknown error',\n                status,\n                statusText: response.statusText,\n              },\n            };\n          }\n\n          const error: ProblemDetails = {\n            title: (err instanceof Error ? err.message : undefined) ?? 'Unknown error',\n            status: response.status,\n            statusText: response.statusText,\n          };\n\n          return { headers: response.headers, successful, status, statusText, error };\n        }\n      }\n\n      const contentLength = response.headers.get('content-length');\n      let data = contentLength && contentLength !== '0' ? ((await response.json()) as T) : undefined;\n      if (data && schema) {\n        const result = await schema.safeParseAsync(data);\n        if (!result.success) {\n          return {\n            headers: response.headers,\n            successful: false,\n            status,\n            statusText,\n            data,\n            error: {\n              title: 'application_error',\n              detail: 'Schema validation error',\n              errors: result.error.flatten().fieldErrors,\n              status: response.status,\n              statusText: response.statusText,\n            },\n          };\n        }\n        data = result.data;\n      }\n\n      return { headers: response.headers, data, successful, status, statusText };\n    } catch (err) {\n      return {\n        headers: new Headers(),\n        successful: false,\n        status: -1,\n        statusText: 'Application Error',\n        error: {\n          title: 'application_error',\n          detail: `Unable to fetch data. The request could not be resolved. ${err}`,\n        },\n      };\n    }\n  }\n\n  private makeUrl<T>(url: string, options?: InnerRequestOptions<T>): string {\n    if (url.startsWith('http://') || url.startsWith('https://')) return url;\n    const baseUrl = options?.baseUrl ?? this.baseUrl;\n    return `${baseUrl}${url}`;\n  }\n}\n\n/**\n * Whether to skip serialization of the payload.\n * @param payload The payload to check.\n * @returns true if the payload should not be serialized; otherwise, false.\n */\nfunction skipSerialization(\n  payload: InnerRequestOptions<never>['payload'],\n): payload is FormData | URLSearchParams | ReadableStream | Blob | ArrayBuffer | string | undefined {\n  return (\n    payload instanceof FormData ||\n    payload instanceof URLSearchParams ||\n    payload instanceof ReadableStream ||\n    payload instanceof Blob ||\n    payload instanceof ArrayBuffer ||\n    payload instanceof Buffer ||\n    typeof payload === 'string' ||\n    !payload\n  );\n}\n\n/** Http request error */\nexport class HttpRequestError extends Error {\n  constructor(\n    message: string,\n    public code: number,\n  ) {\n    super(message);\n  }\n}\n\nexport function isErrorTemporaryFailure(e?: { code?: string | number; message?: string } | null): boolean {\n  if (e instanceof HttpRequestError) {\n    // Check for common HTTP status codes that indicate a temporary failure\n    // See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status\n    switch (e.code) {\n      case 502:\n        return true; // 502 Bad Gateway\n      case 503:\n        return true; // 503 Service Unavailable\n      case 504:\n        return true; // 504 Gateway Timeout\n      default:\n        return false;\n    }\n  } else if (e?.code) {\n    // Check for Node.js system errors that indicate a temporary failure\n    // See: https://nodejs.org/api/errors.html#errors_common_system_errors\n    switch (e.code) {\n      case 'ETIMEDOUT':\n        return true; // Operation timed out\n      default:\n        return false;\n    }\n  } else {\n    return false;\n  }\n}\n"],"mappings":";;;AAAA,MAAa,kCAAkC;AAC/C,MAAa,2BAA2B;AACxC,MAAa,qBAAqB;AAClC,MAAa,yBAAyB;AACtC,MAAa,4BAA4B;;;;ACFzC,IAAa,wBAAb,MAAmC;CACjC,AAAQ,OAAO;CACf,AAAQ,WAAmB,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,UAAU,EAAE;CACrE,AAAQ,QAA0C,EAAE;CAEpD,MAAa,SAA0B;AACrC,MAAI,KAAK,MAAM,WAAW,EACxB,OAAM,IAAI,MAAM,oDAAoD;EAGtE,MAAMA,OAAiD,EAAE;AAEzD,OAAK,MAAM,QAAQ,KAAK,OAAO;AAE7B,QAAK,KAAK,KAAK,KAAK,SAAS,MAAM;AAGnC,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,QAAQ,CACrD,MAAK,KAAK,GAAG,IAAI,IAAI,MAAM,MAAM;AAEnC,QAAK,KAAK,OAAO;AAGjB,QAAK,KAAK,KAAK,KAAK;AACpB,QAAK,KAAK,OAAO;;AAGnB,OAAK,KAAK,KAAK,KAAK,SAAS,QAAQ;EAErC,MAAMC,OAAiB,EAAE;AACzB,OAAK,MAAM,QAAQ,KACjB,KAAI,gBAAgB,KAAM,MAAK,KAAK,OAAO,KAAK,MAAM,KAAK,aAAa,CAAC,CAAC;WACjE,OAAO,SAAS,SAAU,MAAK,KAAK,OAAO,KAAK,MAAM,OAAO,CAAC;MAClE,MAAK,KAAK,KAAK;AAEtB,SAAO,OAAO,OAAO,KAAK;;CAG5B,AAAO,cAAsB;AAC3B,SAAO,KAAK;;CAGd,AAAO,iBAAyB;AAC9B,SAAO,GAAG,KAAK,KAAK,aAAa,KAAK;;CAGxC,AAAO,IAAI,MAAc,OAAe;EACtC,MAAM,OAAO,WAAW,MAAM,MAAM;AACpC,OAAK,MAAM,KAAK,KAAK;;CAGvB,AAAO,QAAQ,MAAc,MAAY;EACvC,MAAM,OAAO,WAAW,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK;AACzD,OAAK,MAAM,KAAK,KAAK;;;AAUzB,SAAS,WACP,MACA,MACA,UACA,aAC2B;CAC3B,MAAMC,UAAkC,EAAE;AAC1C,SAAQ,mCAAmC,oBAAoB,KAAK,GAAG,WAAW,eAAe,SAAS,KAAK;AAC/G,KAAI,YAAa,SAAQ,4BAA4B;AACrD,QAAO;EAAE;EAAM;EAAS;EAAM;;;;;AC7DhC,MAAM,mBAAmB,SAAS,YAAY,KAAK,UAAU,GAAG,EAAE,IAAI;AAoEtE,IAAa,iBAAb,MAA4B;CAC1B,AAAiB;CACjB,AAAiB;CACjB,AAAiB;;;;;CAMjB,YAAY,EAAE,SAAS,SAAsC;AAC3D,OAAK,UAAU;AAEf,OAAK,UAAU,IAAI,QAAQ,GACxB,qBAAqB,oBACvB,CAAC;AAEF,OAAK,QAAQ;;CAGf,MAAM,IAAO,KAAa,SAAkC;AAC1D,SAAO,KAAK,QAAW;GACrB,KAAK,KAAK,QAAQ,KAAK,QAAQ;GAC/B,QAAQ;GACR,GAAG;GACJ,CAAC;;CAGJ,MAAM,KAAQ,KAAa,SAAkC;AAC3D,SAAO,KAAK,QAAW;GACrB,QAAQ;GACR,KAAK,KAAK,QAAQ,KAAK,QAAQ;GAC/B,GAAG;GACJ,CAAC;;CAGJ,MAAM,IAAO,KAAa,SAAkC;AAC1D,SAAO,KAAK,QAAW;GACrB,QAAQ;GACR,KAAK,KAAK,QAAQ,KAAK,QAAQ;GAC/B,GAAG;GACJ,CAAC;;CAGJ,MAAM,MAAS,KAAa,SAAkC;AAC5D,SAAO,KAAK,QAAW;GACrB,QAAQ;GACR,KAAK,KAAK,QAAQ,KAAK,QAAQ;GAC/B,GAAG;GACJ,CAAC;;CAGJ,MAAM,OAAU,KAAa,SAAkC;AAC7D,SAAO,KAAK,QAAW;GACrB,QAAQ;GACR,KAAK,KAAK,QAAQ,KAAK,QAAQ;GAC/B,GAAG;GACJ,CAAC;;CAGJ,MAAM,QAAW,SAAuE;EACtF,MAAM,EAAE,QAAQ,KAAK,SAAS,WAAW,SAAS,mBAAmB,WAAW;EAGhF,MAAM,UAAU,IAAI,QAAQ,KAAK,QAAQ;EACzC,MAAM,iBAAiB,aAAa,UAAU,SAAS,IAAI,GAAG,UAAU,IAAI,iBAAiB,KAAK;AAClG,UAAQ,IAAI,wBAAwB,eAAe;AAGnD,MAAI,KAAK,MACP,SAAQ,IAAI,2BAA2B,UAAU,KAAK,QAAQ;AAKhE,MAAI,kBACF,KAAI,6BAA6B,QAC/B,mBAAkB,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,MAAgB,CAAC;WACnE,MAAM,QAAQ,kBAAkB,CACzC,mBAAkB,SAAS,CAAC,KAAK,WAAW,QAAQ,IAAI,KAAK,MAAM,CAAC;MAEpE,QAAO,QAAQ,kBAAkB,CAAC,SAAS,CAAC,KAAK,WAAW,QAAQ,IAAI,KAAK,MAAgB,CAAC;EAMlG,IAAIC;AACJ,MAAI,kBAAkB,QAAQ,CAAE,QAAO;WAC9B,mBAAmB,uBAAuB;AACjD,UAAO,IAAI,WAAW,MAAM,QAAQ,QAAQ,CAAC;AAC7C,WAAQ,IAAI,0BAA0B,QAAQ,gBAAgB,CAAC;SAC1D;AACL,UAAO,KAAK,UAAU,QAAQ;AAC9B,WAAQ,IAAI,0BAA0B,mBAAmB;;AAI3D,MAAI;GACF,MAAM,WAAW,MAAM,MAAM,KAAK;IAAE;IAAQ;IAAS;IAAM,CAAC;GAC5D,MAAM,EAAE,IAAI,YAAY,QAAQ,eAAe;AAE/C,OAAI,CAAC,WACH,KAAI;IACF,MAAM,WAAW,MAAM,SAAS,MAAM;AACtC,WAAO;KAAE,SAAS,SAAS;KAAS;KAAY;KAAQ;KAAY,OAAO,KAAK,MAAM,SAAS;KAAE;YAC1F,KAAK;AACZ,QAAI,eAAe,YACjB,QAAO;KACL,SAAS,SAAS;KAClB;KACA;KACA;KACA,OAAO;MACL,OAAO;MACP;MACA,YAAY,SAAS;MACtB;KACF;IAGH,MAAMC,QAAwB;KAC5B,QAAQ,eAAe,QAAQ,IAAI,UAAU,WAAc;KAC3D,QAAQ,SAAS;KACjB,YAAY,SAAS;KACtB;AAED,WAAO;KAAE,SAAS,SAAS;KAAS;KAAY;KAAQ;KAAY;KAAO;;GAI/E,MAAM,gBAAgB,SAAS,QAAQ,IAAI,iBAAiB;GAC5D,IAAI,OAAO,iBAAiB,kBAAkB,MAAQ,MAAM,SAAS,MAAM,GAAU;AACrF,OAAI,QAAQ,QAAQ;IAClB,MAAM,SAAS,MAAM,OAAO,eAAe,KAAK;AAChD,QAAI,CAAC,OAAO,QACV,QAAO;KACL,SAAS,SAAS;KAClB,YAAY;KACZ;KACA;KACA;KACA,OAAO;MACL,OAAO;MACP,QAAQ;MACR,QAAQ,OAAO,MAAM,SAAS,CAAC;MAC/B,QAAQ,SAAS;MACjB,YAAY,SAAS;MACtB;KACF;AAEH,WAAO,OAAO;;AAGhB,UAAO;IAAE,SAAS,SAAS;IAAS;IAAM;IAAY;IAAQ;IAAY;WACnE,KAAK;AACZ,UAAO;IACL,SAAS,IAAI,SAAS;IACtB,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,OAAO;KACL,OAAO;KACP,QAAQ,4DAA4D;KACrE;IACF;;;CAIL,AAAQ,QAAW,KAAa,SAA0C;AACxE,MAAI,IAAI,WAAW,UAAU,IAAI,IAAI,WAAW,WAAW,CAAE,QAAO;AAEpE,SAAO,GADS,SAAS,WAAW,KAAK,UACrB;;;;;;;;AASxB,SAAS,kBACP,SACkG;AAClG,QACE,mBAAmB,YACnB,mBAAmB,mBACnB,mBAAmB,kBACnB,mBAAmB,QACnB,mBAAmB,eACnB,mBAAmB,UACnB,OAAO,YAAY,YACnB,CAAC;;;AAKL,IAAa,mBAAb,cAAsC,MAAM;CAC1C,YACE,SACA,AAAOC,MACP;AACA,QAAM,QAAQ;EAFP;;;AAMX,SAAgB,wBAAwB,GAAkE;AACxG,KAAI,aAAa,iBAGf,SAAQ,EAAE,MAAV;EACE,KAAK,IACH,QAAO;EACT,KAAK,IACH,QAAO;EACT,KAAK,IACH,QAAO;EACT,QACE,QAAO;;UAEF,GAAG,KAGZ,SAAQ,EAAE,MAAV;EACE,KAAK,YACH,QAAO;EACT,QACE,QAAO;;KAGX,QAAO"}

package/dist/job-CxYcRj_D.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"job-CxYcRj_D.js","names":["matches: RegExpExecArray[]","updates: DependabotUpdate[]","registries: Record<string, DependabotRegistry>","referenced: string[]"],"sources":["../src/dependabot/placeholder.ts","../src/dependabot/config.ts","../src/dependabot/job.ts"],"sourcesContent":["export type VariableFinderFn = (name: string) => string | undefined | Promise<string | undefined>;\n\nasync function convertPlaceholder({\n  input,\n  variableFinder,\n}: {\n  input?: string;\n  variableFinder: VariableFinderFn;\n}): Promise<string | undefined> {\n  if (!input) return undefined;\n\n  const matches: RegExpExecArray[] = extractPlaceholder(input);\n  let result = input;\n  for (const match of matches) {\n    const placeholder = match[0];\n    const name = match[1]!;\n    const value = (await variableFinder(name)) ?? placeholder;\n    result = result.replace(placeholder, value);\n  }\n  return result;\n}\n\nfunction extractPlaceholder(input: string) {\n  const regexp: RegExp = /\\${{\\s*([a-zA-Z_]+[a-zA-Z0-9._-]*)\\s*}}/g;\n\n  return matchAll(input, regexp);\n}\n\nfunction matchAll(input: string, regexp: RegExp, matches: Array<RegExpExecArray> = []) {\n  const matchIfAny = regexp.exec(input);\n  if (matchIfAny) {\n    matches.push(matchIfAny);\n\n    // recurse until no more matches\n    matchAll(input, regexp, matches);\n  }\n  return matches;\n}\n\nexport { convertPlaceholder, extractPlaceholder };\n","import * as yaml from 'js-yaml';\nimport { z } from 'zod/v4';\n\nimport { convertPlaceholder, type VariableFinderFn } from './placeholder';\n\nexport const DependabotRegistrySchema = z\n  .object({\n    type: z.enum([\n      // order matches\n      // https://docs.github.com/en/enterprise-cloud@latest/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#supported-private-registries\n\n      'cargo-registry',\n      'composer-repository',\n      'docker-registry',\n      'git',\n      'goproxy-server',\n      'helm-registry',\n      'hex-organization',\n      'hex-repository',\n      'maven-repository',\n      'npm-registry',\n      'nuget-feed',\n      'pub-repository',\n      'python-index',\n      'rubygems-server',\n      'terraform-registry',\n    ]),\n    url: z.string().optional(),\n    username: z.string().optional(),\n    password: z.string().optional(),\n    key: z.string().optional(),\n    token: z.string().optional(),\n    'replaces-base': z.boolean().optional(),\n    host: z.string().optional(), // for terraform and composer only\n    registry: z.string().optional(), // for npm only\n    organization: z.string().optional(), // for hex-organisation only\n    repo: z.string().optional(), // for hex-repository only\n    'public-key-fingerprint': z.string().optional(), // for hex-repository only\n    'index-url': z.string().optional(), // for python-index only\n    'auth-key': z.string().optional(), // used by composer-repository, docker-registry, etc\n    'tenant-id': z.string().optional(), // can only be for azure related stuff, not sure\n    'client-id': z.string().optional(), // can only be for azure related stuff, not sure\n  })\n  // change underscore to dash in the registry key/type\n  .transform((value) => ({ ...value, type: value.type.replace('-', '_') }));\nexport type DependabotRegistry = z.infer<typeof DependabotRegistrySchema>;\n\nexport const DependabotGroupSchema = z.object({\n  // Define an identifier for the group to use in branch names and pull request titles.\n  // This must start and end with a letter, and can contain letters, pipes |, underscores _, or hyphens -.\n  IDENTIFIER: z\n    .string()\n    .check(\n      z.regex(/^[a-zA-Z][a-zA-Z0-9|_-]*[a-zA-Z]$/, {\n        message:\n          'Group identifier must start and end with a letter, and can contain letters, pipes |, underscores _, or hyphens -.',\n      }),\n    )\n    .optional(),\n  'applies-to': z.enum(['version-updates', 'security-updates']).optional(),\n  'dependency-type': z.enum(['development', 'production']).optional(),\n  patterns: z.string().array().optional(),\n  'exclude-patterns': z.string().array().optional(),\n  'update-types': z.enum(['major', 'minor', 'patch']).array().optional(),\n});\nexport type DependabotGroup = z.infer<typeof DependabotGroupSchema>;\n\nexport const DependabotAllowConditionSchema = z.object({\n  'dependency-name': z.string().optional(),\n  'dependency-type': z.enum(['direct', 'indirect', 'all', 'production', 'development']).optional(),\n  'update-type': z.enum(['all', 'security']).optional(),\n});\nexport type DependabotAllowCondition = z.infer<typeof DependabotAllowConditionSchema>;\n\nexport const DependabotIgnoreConditionSchema = z\n  .object({\n    'dependency-name': z.string().optional(),\n    versions: z.string().array().or(z.string()).optional(),\n    'update-types': z\n      .enum(['version-update:semver-major', 'version-update:semver-minor', 'version-update:semver-patch'])\n      .array()\n      .optional(),\n  })\n  .and(z.record(z.string(), z.any()));\nexport type DependabotIgnoreCondition = z.infer<typeof DependabotIgnoreConditionSchema>;\n\nexport const DependabotScheduleSchema = z.object({\n  interval: z.enum(['daily', 'weekly', 'monthly', 'quarterly', 'semiannually', 'yearly', 'cron']),\n\n  day: z\n    .enum(['sunday', 'monday', 'tuesday', 'wednesday', 'thursday', 'friday', 'saturday'])\n    .optional()\n    .default('monday'),\n\n  time: z\n    .string()\n    .default('02:00')\n    .check(z.regex(/^(0[0-9]|1[0-9]|2[0-3]):[0-5][0-9]$/, { message: 'Time must be in HH:MM format' }))\n    .optional(),\n\n  timezone: z\n    .string()\n    .optional()\n    .default('Etc/UTC')\n    .refine(\n      (value) => {\n        try {\n          // If tz is not a valid IANA name, this throws a RangeError\n          Intl.DateTimeFormat(undefined, { timeZone: value });\n          return true;\n        } catch {\n          return false;\n        }\n      },\n      { message: 'Invalid IANA time zone' },\n    ),\n  cronjob: z\n    .string()\n    .check(z.regex(/^\\S+ \\S+ \\S+ \\S+ \\S+$/, { message: 'Cronjob must be in standard cron format' }))\n    .optional(),\n});\nexport type DependabotSchedule = z.infer<typeof DependabotScheduleSchema>;\n\nexport const DependabotCommitMessageSchema = z.object({\n  prefix: z.string().optional(),\n  'prefix-development': z.string().optional(),\n  include: z.string().optional(),\n});\nexport type DependabotCommitMessage = z.infer<typeof DependabotCommitMessageSchema>;\n\nexport const DependabotCooldownSchema = z.object({\n  'default-days': z.number().optional(),\n  'semver-major-days': z.number().optional(),\n  'semver-minor-days': z.number().optional(),\n  'semver-patch-days': z.number().optional(),\n  include: z.string().array().optional(),\n  exclude: z.string().array().optional(),\n});\nexport type DependabotCooldown = z.infer<typeof DependabotCooldownSchema>;\n\nconst DependabotPullRequestBranchNameSchema = z.object({\n  separator: z.string().optional(),\n});\nexport type DependabotPullRequestBranchName = z.infer<typeof DependabotPullRequestBranchNameSchema>;\n\nexport const PackageEcosystemSchema = z.enum([\n  // order matches\n  // https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#package-ecosystem-\n\n  'bun',\n  'bundler',\n  'cargo',\n  'composer',\n  'devcontainers',\n  'docker',\n  'docker-compose',\n  'dotnet-sdk',\n  'helm',\n  'mix',\n  'elm',\n  'gitsubmodule',\n  'github-actions',\n  'gomod',\n  'gradle',\n  'julia',\n  'maven',\n  'npm',\n  'nuget',\n  'pip',\n  'pip-compile', // alias mapped to 'pip'\n  'pipenv', // alias mapped to 'pip'\n  'pnpm', // alias mapped to 'npm'\n  'poetry', // alias mapped to 'pip'\n  'pub',\n  'rust-toolchain',\n  'swift',\n  'terraform',\n  'uv',\n  'vcpkg',\n  'yarn', // alias mapped to 'npm'\n]);\nexport type PackageEcosystem = z.infer<typeof PackageEcosystemSchema>;\n\nexport const VersioningStrategySchema = z.enum(['auto', 'increase', 'increase-if-necessary', 'lockfile-only', 'widen']);\nexport type VersioningStrategy = z.infer<typeof VersioningStrategySchema>;\n\nexport const DependabotUpdateSchema = z\n  .object({\n    'package-ecosystem': PackageEcosystemSchema,\n    directory: z.string().optional(),\n    directories: z.string().array().optional(),\n    'exclude-paths': z.string().array().optional(),\n    allow: DependabotAllowConditionSchema.array().optional(),\n    assignees: z.string().array().optional(),\n    'commit-message': DependabotCommitMessageSchema.optional(),\n    cooldown: DependabotCooldownSchema.optional(),\n    groups: z.record(z.string(), DependabotGroupSchema).optional(),\n    ignore: DependabotIgnoreConditionSchema.array().optional(),\n    'insecure-external-code-execution': z.enum(['allow', 'deny']).optional(),\n    labels: z.string().array().optional(),\n    milestone: z.coerce.string().optional(),\n    'open-pull-requests-limit': z.number().check(z.int(), z.gte(0)).optional(),\n    'pull-request-branch-name': DependabotPullRequestBranchNameSchema.optional(),\n    'rebase-strategy': z.string().optional(),\n    registries: z.string().array().optional(),\n    schedule: DependabotScheduleSchema.optional(), // TODO: make required after 2025-Nov-30\n    'target-branch': z.string().optional(),\n    vendor: z.boolean().optional(),\n    'versioning-strategy': VersioningStrategySchema.optional(),\n    patterns: z.string().array().optional(),\n    'multi-ecosystem-group': z.string().optional(),\n  })\n  .transform((value, { addIssue }) => {\n    // either 'directory' or 'directories' must be specified\n    if (!value.directory && (!value.directories || value.directories.length === 0)) {\n      addIssue(\"Either 'directory' or 'directories' must be specified in the dependency update configuration.\");\n    }\n\n    // validate that 'directory' does not contain glob patterns\n    if (value.directory && /[*?[\\]{}]/.test(value.directory)) {\n      addIssue(\"The 'directory' field must not include glob pattern.\");\n    }\n\n    value['open-pull-requests-limit'] ??= 5; // default to 5 if not specified\n\n    // The patterns key is required when using multi-ecosystem-group.\n    // You can specify dependency patterns to include only certain dependencies in the group,\n    // or use [\"*\"] to include all dependencies.\n    if (value['multi-ecosystem-group'] && (!value.patterns || value.patterns.length === 0)) {\n      addIssue(\n        \"The 'patterns' field must be specified and contain at least one pattern when using 'multi-ecosystem-group'.\",\n      );\n    }\n\n    return value;\n  });\nexport type DependabotUpdate = z.infer<typeof DependabotUpdateSchema>;\n\nexport const DependabotMultiEcosystemGroupSchema = z.object({\n  schedule: DependabotScheduleSchema,\n  labels: z.string().array().optional(), // behaviour: additive\n  milestone: z.coerce.string().optional(), // behaviour: group-only\n  assignees: z.string().array().optional(), // behaviour: additive\n  'target-branch': z.string().optional(), // behaviour: group-only\n  'commit-message': DependabotCommitMessageSchema.optional(), // behaviour: group-only\n  'pull-request-branch-name': DependabotPullRequestBranchNameSchema.optional(), // behaviour: group-only\n});\nexport type DependabotMultiEcosystemGroup = z.infer<typeof DependabotMultiEcosystemGroupSchema>;\n\n/**\n * Represents the dependabot.yaml configuration file options.\n * See: https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#configuration-options-for-dependabotyml\n */\nexport const DependabotConfigSchema = z\n  .object({\n    /**\n     * Mandatory. configuration file version.\n     **/\n    version: z.number().refine((v) => v === 2, { message: 'Only version 2 of dependabot is supported' }),\n\n    /**\n     * Optional. Configure groups of ecosystems to update together in a single pull request.\n     */\n    'multi-ecosystem-groups': z.record(z.string(), DependabotMultiEcosystemGroupSchema).optional(),\n\n    /**\n     * Mandatory. Configure how Dependabot updates the versions or project dependencies.\n     * Each entry configures the update settings for a particular package manager.\n     */\n    updates: DependabotUpdateSchema.array().check(\n      z.minLength(1, { message: 'At least one update configuration is required' }),\n    ),\n\n    /**\n     * Optional.\n     * Specify authentication details to access private package registries.\n     */\n    registries: z.record(z.string(), DependabotRegistrySchema).optional(),\n\n    /**\n     * Optional. Enables updates for ecosystems that are not yet generally available.\n     * https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#enable-beta-ecosystems-\n     */\n    'enable-beta-ecosystems': z.boolean().optional(),\n  })\n  .transform((value, { addIssue }) => {\n    // If you attempt to set group-only keys at the ecosystem level (in updates entries),\n    // Dependabot will throw a configuration error and fail to process your dependabot.yml file.\n    // These keys must only be specified in the multi-ecosystem-groups section.\n    // https://docs.github.com/en/code-security/dependabot/working-with-dependabot/configuring-multi-ecosystem-updates#group-only-keys\n    const groupOnlyKeys = ['milestone', 'target-branch', 'commit-message', 'pull-request-branch-name'] as const;\n    if (value['multi-ecosystem-groups']) {\n      for (const update of value.updates) {\n        for (const key of groupOnlyKeys) {\n          if (key in update) {\n            addIssue(\n              `The '${key}' field must not be specified in the 'updates' section when using 'multi-ecosystem-groups'. It is a group-only field.`,\n            );\n          }\n        }\n      }\n    }\n\n    return value;\n  });\n\nexport type DependabotConfig = z.infer<typeof DependabotConfigSchema>;\n\nexport function parseUpdates(config: DependabotConfig, configPath: string): DependabotUpdate[] {\n  const updates: DependabotUpdate[] = [];\n\n  // Parse the value of each of the updates obtained from the file\n  for (const update of config.updates) {\n    // populate the 'ignore' conditions 'source' and 'updated-at' properties, if missing\n    // NOTE: 'source' and 'updated-at' are not documented in the dependabot.yml config docs, but are defined in the dependabot-core and dependabot-cli models.\n    //       Currently they don't appear to add much value to the update process, but are populated here for completeness.\n    if (update.ignore) {\n      for (const condition of update.ignore) {\n        condition.source ??= configPath;\n        // we don't know the last updated time, so we use the current time\n        condition['updated-at'] ??= new Date().toISOString();\n      }\n    }\n\n    updates.push(update);\n  }\n  return updates;\n}\n\nexport async function parseRegistries(\n  config: DependabotConfig,\n  variableFinder: VariableFinderFn,\n): Promise<Record<string, DependabotRegistry>> {\n  // Parse the value of each of the registries obtained from the config\n  const registries: Record<string, DependabotRegistry> = {};\n  for (const [key, registry] of Object.entries(config.registries || {})) {\n    const updated = { ...registry };\n    const { type } = updated;\n\n    // handle special fields for 'hex-organization' types\n    if (type === 'hex_organization' && !updated.organization) {\n      throw new Error(`The value 'organization' in dependency registry config '${type}' is missing`);\n    }\n\n    // handle special fields for 'hex-repository' types\n    if (type === 'hex_repository' && !updated.repo) {\n      throw new Error(`The value 'repo' in dependency registry config '${key}' is missing`);\n    }\n\n    // parse username, password, key, and token while replacing tokens where necessary\n    updated.username = await convertPlaceholder({ input: updated.username, variableFinder: variableFinder });\n    updated.password = await convertPlaceholder({ input: updated.password, variableFinder: variableFinder });\n    updated.key = await convertPlaceholder({ input: updated.key, variableFinder: variableFinder });\n    updated.token = await convertPlaceholder({ input: updated.token, variableFinder: variableFinder });\n\n    // TODO: include sources for this logic, otherwise it looks like magic.\n    // Initially, this was based on reading through the dependabot-core logic\n    // but much has since changed.\n\n    // parse the url\n    const url = updated.url;\n    if (!url && type !== 'hex_organization') {\n      throw new Error(`The value 'url' in dependency registry config '${key}' is missing`);\n    }\n    if (url) {\n      /*\n       * Some credentials do not use the 'url' property in the Ruby updater.\n       * The 'host' and 'registry' properties are derived from the given URL.\n       * The 'registry' property is derived from the 'url' by stripping off the scheme.\n       * The 'host' property is derived from the hostname of the 'url'.\n       *\n       * 'npm_registry' and 'docker_registry' use 'registry' only.\n       * 'terraform_registry' uses 'host' only.\n       * 'composer_repository' uses both 'url' and 'host'.\n       * 'python_index' uses 'index-url' instead of 'url'.\n       */\n\n      if (URL.canParse(url)) {\n        const parsedUrl = new URL(url);\n\n        const addRegistry = type === 'docker_registry' || type === 'npm_registry';\n        if (addRegistry) updated.registry = url.replace('https://', '').replace('http://', '');\n\n        const addHost = type === 'composer_repository' || type === 'terraform_registry';\n        if (addHost) updated.host = parsedUrl.hostname;\n      }\n\n      if (type === 'python_index') updated['index-url'] = url;\n\n      const removeUrl =\n        type === 'docker_registry' ||\n        type === 'npm_registry' ||\n        type === 'terraform_registry' ||\n        type === 'python_index';\n      if (removeUrl) delete updated.url; // remove the url if not needed\n    }\n\n    // add to list\n    registries[key] = updated;\n  }\n  return registries;\n}\n\nexport function validateConfiguration(updates: DependabotUpdate[], registries: Record<string, DependabotRegistry>) {\n  const configured = Object.keys(registries);\n  const referenced: string[] = [];\n  for (const u of updates) referenced.push(...(u.registries ?? []));\n\n  // ensure there are no configured registries that have not been referenced\n  const missingConfiguration = referenced.filter((el) => !configured.includes(el));\n  if (missingConfiguration.length > 0) {\n    throw new Error(\n      `Referenced registries: '${missingConfiguration.join(',')}' have not been configured in the root of dependabot.yml`,\n    );\n  }\n\n  // ensure there are no registries referenced but not configured\n  const missingReferences = configured.filter((el) => !referenced.includes(el));\n  if (missingReferences.length > 0) {\n    throw new Error(`Registries: '${missingReferences.join(',')}' have not been referenced by any update`);\n  }\n}\n\n/**\n * Possible paths to the dependabot config file.\n * Remember to prefix with a forward slash when querying API endpoints or where necessary.\n */\nexport const POSSIBLE_CONFIG_FILE_PATHS = [\n  '.azuredevops/dependabot.yml',\n  '.azuredevops/dependabot.yaml',\n  '.github/dependabot.yaml',\n  '.github/dependabot.yml',\n];\n\n/**\n * Parse the contents of a dependabot config YAML file\n * @returns {DependabotConfig} config - the dependabot configuration\n */\nexport async function parseDependabotConfig({\n  configContents,\n  configPath,\n  variableFinder,\n}: {\n  configContents: string;\n  configPath: string;\n  variableFinder: VariableFinderFn;\n}): Promise<DependabotConfig> {\n  // Load the config\n  const loadedConfig = yaml.load(configContents);\n  if (loadedConfig === null || typeof loadedConfig !== 'object') {\n    throw new Error('Invalid dependabot config object');\n  }\n\n  // Parse the config\n  const config = await DependabotConfigSchema.parseAsync(loadedConfig);\n  const updates = parseUpdates(config, configPath);\n  const registries = await parseRegistries(config, variableFinder);\n  validateConfiguration(updates, registries);\n\n  return { ...config, updates, registries };\n}\n","import { z } from 'zod/v4';\nimport { DependabotCooldownSchema } from './config';\n\n// we use nullish() because it does optional() and allows the value to be set to null\n\nexport const DependabotCredentialSchema = z.record(z.string(), z.any());\nexport type DependabotCredential = z.infer<typeof DependabotCredentialSchema>;\n\nexport const CertificateAuthoritySchema = z.object({\n  cert: z.string(),\n  key: z.string(),\n});\nexport type CertificateAuthority = z.infer<typeof CertificateAuthoritySchema>;\n\nexport const DependabotProxyConfigSchema = z.object({\n  all_credentials: DependabotCredentialSchema.array(),\n  ca: CertificateAuthoritySchema,\n});\nexport type DependabotProxyConfig = z.infer<typeof DependabotProxyConfigSchema>;\n\nexport const DependabotSourceProviderSchema = z.enum(['azure']);\nexport type DependabotSourceProvider = z.infer<typeof DependabotSourceProviderSchema>;\n\nexport const DependabotSourceSchema = z.object({\n  provider: DependabotSourceProviderSchema,\n  repo: z.string(),\n  directory: z.string().nullish(),\n  directories: z.string().array().nullish(),\n  branch: z.string().nullish(),\n  commit: z.string().nullish(),\n  hostname: z.string().nullish(), // Must be provided if api-endpoint is\n  'api-endpoint': z.string().nullish(), // Must be provided if hostname is\n});\nexport type DependabotSource = z.infer<typeof DependabotSourceSchema>;\n\nexport const DependabotExistingPRSchema = z.object({\n  'dependency-name': z.string(),\n  'dependency-version': z.string().nullish(),\n  directory: z.string().nullish(),\n  removed: z.boolean().nullish(),\n});\nexport type DependabotExistingPR = z.infer<typeof DependabotExistingPRSchema>;\n\nexport const DependabotExistingGroupPRSchema = z.object({\n  'dependency-group-name': z.string(),\n  dependencies: DependabotExistingPRSchema.array(),\n});\nexport type DependabotExistingGroupPR = z.infer<typeof DependabotExistingGroupPRSchema>;\n\nexport const DependabotAllowedSchema = z.object({\n  'dependency-name': z.string().nullish(),\n  'dependency-type': z.string().nullish(),\n  'update-type': z.enum(['all', 'security']).optional(),\n});\nexport type DependabotAllowed = z.infer<typeof DependabotAllowedSchema>;\n\nexport const DependabotGroupRuleJobSchema = z.object({\n  patterns: z.string().array().nullish(),\n  'exclude-patterns': z.string().array().nullish(),\n  'dependency-type': z.string().nullish(),\n  'update-types': z.string().array().nullish(),\n});\nexport type DependabotGroupRuleJob = z.infer<typeof DependabotGroupRuleJobSchema>;\n\nexport const DependabotGroupJobSchema = z.object({\n  name: z.string(),\n  'applies-to': z.string().nullish(),\n  rules: DependabotGroupRuleJobSchema,\n});\nexport type DependabotGroupJob = z.infer<typeof DependabotGroupJobSchema>;\n\nexport const DependabotConditionSchema = z.object({\n  'dependency-name': z.string(),\n  source: z.string().nullish(),\n  'update-types': z.string().array().nullish(),\n  'updated-at': z.coerce.string().nullish(),\n  'version-requirement': z.string().nullish(),\n});\nexport type DependabotCondition = z.infer<typeof DependabotConditionSchema>;\n\nexport const DependabotSecurityAdvisorySchema = z.object({\n  'dependency-name': z.string(),\n  'affected-versions': z.string().array(),\n  'patched-versions': z.string().array().nullish(), // may not be patched as of yet\n  'unaffected-versions': z.string().array(),\n});\nexport type DependabotSecurityAdvisory = z.infer<typeof DependabotSecurityAdvisorySchema>;\n\nexport const DependabotRequirementSourceSchema = z.record(z.string(), z.any());\nexport type DependabotRequirementSource = z.infer<typeof DependabotRequirementSourceSchema>;\n\nexport const DependabotRequirementSchema = z.object({\n  file: z.string().nullish(), // e.g. 'requirements.txt' or '/Root.csproj'\n  groups: z.string().array().nullish(), // e.g. ['dependencies']\n  metadata: z.record(z.string(), z.any()).nullish(),\n  requirement: z.string().nullish(), // e.g. '==3.2.0' or '8.1.0'\n  source: DependabotRequirementSourceSchema.nullish(),\n  version: z.string().nullish(),\n  'previous-version': z.string().nullish(),\n});\nexport type DependabotRequirement = z.infer<typeof DependabotRequirementSchema>;\n\nexport const DependabotDependencySchema = z.object({\n  name: z.string(), // e.g. 'django' or 'GraphQL.Server.Ui.Voyager'\n  'previous-requirements': DependabotRequirementSchema.array().nullish(),\n  'previous-version': z.string().nullish(),\n  version: z.string().nullish(), // e.g. '5.0.1' or '8.1.0'\n  requirements: DependabotRequirementSchema.array().nullish(),\n  removed: z.boolean().nullish(),\n  directory: z.string().nullish(),\n});\nexport type DependabotDependency = z.infer<typeof DependabotDependencySchema>;\n\nexport const DependabotCommitOptionsSchema = z.object({\n  prefix: z.string().nullish(),\n  'prefix-development': z.string().nullish(),\n  'include-scope': z.boolean().nullish(),\n});\nexport type DependabotCommitOptions = z.infer<typeof DependabotCommitOptionsSchema>;\n\nexport const DependabotExperimentsSchema = z.record(z.string(), z.union([z.string(), z.boolean()]));\nexport type DependabotExperiments = z.infer<typeof DependabotExperimentsSchema>;\n\nexport const DependabotPackageManagerSchema = z.enum([\n  // order matches dependabot-action/src/update-containers.ts\n\n  'bundler',\n  'cargo',\n  'composer',\n  'pub',\n  'docker',\n  'elm',\n  'github_actions', // ecosystem(s): 'github-actions'\n  'submodules', // ecosystem(s): 'gitsubmodule'\n  'go_modules', // ecosystem(s): 'gomod'\n  'gradle',\n  'maven',\n  'hex', // ecosystem(s): 'mix'\n  'nuget',\n  'npm_and_yarn', // ecosystem(s): 'npm', 'pnpm', 'yarn'\n  'pip', // ecosystem(s): 'pipenv', 'pip-compile', 'poetry'\n  'rust_toolchain', // ecosystem(s): 'rust-toolchain'\n  'swift',\n  'terraform',\n  'devcontainers',\n  'dotnet_sdk', // ecosystem(s): 'dotnet-sdk'\n  'bun',\n  'docker_compose', //  // ecosystem(s): 'docker-compose',\n  'uv',\n  'vcpkg',\n  'helm',\n  'julia',\n]);\nexport type DependabotPackageManager = z.infer<typeof DependabotPackageManagerSchema>;\n\nexport const DependabotCommandSchema = z.enum(['graph', 'version', 'recreate']);\nexport type DependabotCommand = z.infer<typeof DependabotCommandSchema>;\n\n// See: https://github.com/dependabot/cli/blob/main/internal/model/job.go\n//      https://github.com/dependabot/dependabot-core/blob/main/updater/lib/dependabot/job.rb\nexport const DependabotJobConfigSchema = z.object({\n  id: z.number().optional(),\n  command: DependabotCommandSchema.optional(),\n  'package-manager': DependabotPackageManagerSchema,\n  'allowed-updates': DependabotAllowedSchema.array(),\n  debug: z.boolean().nullable(),\n  'dependency-groups': DependabotGroupJobSchema.array().nullish(),\n  dependencies: z.string().array().nullable(),\n  'dependency-group-to-refresh': z.string().nullish(),\n  'existing-pull-requests': DependabotExistingPRSchema.array().array(),\n  'existing-group-pull-requests': DependabotExistingGroupPRSchema.array(),\n  experiments: DependabotExperimentsSchema,\n  'ignore-conditions': DependabotConditionSchema.array(),\n  'lockfile-only': z.boolean(),\n  'requirements-update-strategy': z.string().nullable(),\n  'security-advisories': DependabotSecurityAdvisorySchema.array(),\n  'security-updates-only': z.boolean(),\n  source: DependabotSourceSchema,\n  'update-subdependencies': z.boolean(),\n  'updating-a-pull-request': z.boolean(),\n  'vendor-dependencies': z.boolean(),\n  'reject-external-code': z.boolean().nullish(),\n  'repo-private': z.boolean(),\n  'commit-message-options': DependabotCommitOptionsSchema,\n  'credentials-metadata': DependabotCredentialSchema.array().nullish(),\n  'max-updater-run-time': z.int().nullish(),\n  cooldown: DependabotCooldownSchema.nullish(),\n  'proxy-log-response-body-on-auth-failure': z.boolean().nullish(),\n  'enable-beta-ecosystems': z.boolean().nullish(),\n  'multi-ecosystem-update': z.boolean().nullish(),\n  'exclude-paths': z.string().array().optional(),\n});\nexport type DependabotJobConfig = z.infer<typeof DependabotJobConfigSchema>;\n\nexport const DependabotJobFileSchema = z.object({\n  job: DependabotJobConfigSchema,\n});\nexport type DependabotJobFile = z.infer<typeof DependabotJobFileSchema>;\n\n// Code below is borrowed and adapted from dependabot-action\n\n// biome-ignore-start lint/suspicious/noExplicitAny: generic\nexport type FetchedFiles = {\n  base_commit_sha: string;\n  dependency_files: any[];\n  base64_dependency_files: any[];\n};\n// biome-ignore-end lint/suspicious/noExplicitAny: generic\n\nexport type FileFetcherInput = {\n  job: DependabotJobConfig;\n};\n\nexport type FileUpdaterInput = FetchedFiles & {\n  job: DependabotJobConfig;\n};\n"],"mappings":";;;;AAEA,eAAe,mBAAmB,EAChC,OACA,kBAI8B;AAC9B,KAAI,CAAC,MAAO,QAAO;CAEnB,MAAMA,UAA6B,mBAAmB,MAAM;CAC5D,IAAI,SAAS;AACb,MAAK,MAAM,SAAS,SAAS;EAC3B,MAAM,cAAc,MAAM;EAC1B,MAAM,OAAO,MAAM;EACnB,MAAM,QAAS,MAAM,eAAe,KAAK,IAAK;AAC9C,WAAS,OAAO,QAAQ,aAAa,MAAM;;AAE7C,QAAO;;AAGT,SAAS,mBAAmB,OAAe;AAGzC,QAAO,SAAS,OAFO,2CAEO;;AAGhC,SAAS,SAAS,OAAe,QAAgB,UAAkC,EAAE,EAAE;CACrF,MAAM,aAAa,OAAO,KAAK,MAAM;AACrC,KAAI,YAAY;AACd,UAAQ,KAAK,WAAW;AAGxB,WAAS,OAAO,QAAQ,QAAQ;;AAElC,QAAO;;;;;AC/BT,MAAa,2BAA2B,EACrC,OAAO;CACN,MAAM,EAAE,KAAK;EAIX;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CACF,KAAK,EAAE,QAAQ,CAAC,UAAU;CAC1B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,KAAK,EAAE,QAAQ,CAAC,UAAU;CAC1B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,iBAAiB,EAAE,SAAS,CAAC,UAAU;CACvC,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,0BAA0B,EAAE,QAAQ,CAAC,UAAU;CAC/C,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,aAAa,EAAE,QAAQ,CAAC,UAAU;CACnC,CAAC,CAED,WAAW,WAAW;CAAE,GAAG;CAAO,MAAM,MAAM,KAAK,QAAQ,KAAK,IAAI;CAAE,EAAE;AAG3E,MAAa,wBAAwB,EAAE,OAAO;CAG5C,YAAY,EACT,QAAQ,CACR,MACC,EAAE,MAAM,qCAAqC,EAC3C,SACE,qHACH,CAAC,CACH,CACA,UAAU;CACb,cAAc,EAAE,KAAK,CAAC,mBAAmB,mBAAmB,CAAC,CAAC,UAAU;CACxE,mBAAmB,EAAE,KAAK,CAAC,eAAe,aAAa,CAAC,CAAC,UAAU;CACnE,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACvC,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACjD,gBAAgB,EAAE,KAAK;EAAC;EAAS;EAAS;EAAQ,CAAC,CAAC,OAAO,CAAC,UAAU;CACvE,CAAC;AAGF,MAAa,iCAAiC,EAAE,OAAO;CACrD,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,mBAAmB,EAAE,KAAK;EAAC;EAAU;EAAY;EAAO;EAAc;EAAc,CAAC,CAAC,UAAU;CAChG,eAAe,EAAE,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC,UAAU;CACtD,CAAC;AAGF,MAAa,kCAAkC,EAC5C,OAAO;CACN,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtD,gBAAgB,EACb,KAAK;EAAC;EAA+B;EAA+B;EAA8B,CAAC,CACnG,OAAO,CACP,UAAU;CACd,CAAC,CACD,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;AAGrC,MAAa,2BAA2B,EAAE,OAAO;CAC/C,UAAU,EAAE,KAAK;EAAC;EAAS;EAAU;EAAW;EAAa;EAAgB;EAAU;EAAO,CAAC;CAE/F,KAAK,EACF,KAAK;EAAC;EAAU;EAAU;EAAW;EAAa;EAAY;EAAU;EAAW,CAAC,CACpF,UAAU,CACV,QAAQ,SAAS;CAEpB,MAAM,EACH,QAAQ,CACR,QAAQ,QAAQ,CAChB,MAAM,EAAE,MAAM,uCAAuC,EAAE,SAAS,gCAAgC,CAAC,CAAC,CAClG,UAAU;CAEb,UAAU,EACP,QAAQ,CACR,UAAU,CACV,QAAQ,UAAU,CAClB,QACE,UAAU;AACT,MAAI;AAEF,QAAK,eAAe,QAAW,EAAE,UAAU,OAAO,CAAC;AACnD,UAAO;UACD;AACN,UAAO;;IAGX,EAAE,SAAS,0BAA0B,CACtC;CACH,SAAS,EACN,QAAQ,CACR,MAAM,EAAE,MAAM,yBAAyB,EAAE,SAAS,2CAA2C,CAAC,CAAC,CAC/F,UAAU;CACd,CAAC;AAGF,MAAa,gCAAgC,EAAE,OAAO;CACpD,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,sBAAsB,EAAE,QAAQ,CAAC,UAAU;CAC3C,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC/B,CAAC;AAGF,MAAa,2BAA2B,EAAE,OAAO;CAC/C,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACtC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACvC,CAAC;AAGF,MAAM,wCAAwC,EAAE,OAAO,EACrD,WAAW,EAAE,QAAQ,CAAC,UAAU,EACjC,CAAC;AAGF,MAAa,yBAAyB,EAAE,KAAK;CAI3C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAa,2BAA2B,EAAE,KAAK;CAAC;CAAQ;CAAY;CAAyB;CAAiB;CAAQ,CAAC;AAGvH,MAAa,yBAAyB,EACnC,OAAO;CACN,qBAAqB;CACrB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CAC1C,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CAC9C,OAAO,+BAA+B,OAAO,CAAC,UAAU;CACxD,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACxC,kBAAkB,8BAA8B,UAAU;CAC1D,UAAU,yBAAyB,UAAU;CAC7C,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,CAAC,UAAU;CAC9D,QAAQ,gCAAgC,OAAO,CAAC,UAAU;CAC1D,oCAAoC,EAAE,KAAK,CAAC,SAAS,OAAO,CAAC,CAAC,UAAU;CACxE,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACrC,WAAW,EAAE,OAAO,QAAQ,CAAC,UAAU;CACvC,4BAA4B,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU;CAC1E,4BAA4B,sCAAsC,UAAU;CAC5E,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACzC,UAAU,yBAAyB,UAAU;CAC7C,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,QAAQ,EAAE,SAAS,CAAC,UAAU;CAC9B,uBAAuB,yBAAyB,UAAU;CAC1D,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACvC,yBAAyB,EAAE,QAAQ,CAAC,UAAU;CAC/C,CAAC,CACD,WAAW,OAAO,EAAE,eAAe;AAElC,KAAI,CAAC,MAAM,cAAc,CAAC,MAAM,eAAe,MAAM,YAAY,WAAW,GAC1E,UAAS,gGAAgG;AAI3G,KAAI,MAAM,aAAa,YAAY,KAAK,MAAM,UAAU,CACtD,UAAS,uDAAuD;AAGlE,OAAM,gCAAgC;AAKtC,KAAI,MAAM,6BAA6B,CAAC,MAAM,YAAY,MAAM,SAAS,WAAW,GAClF,UACE,8GACD;AAGH,QAAO;EACP;AAGJ,MAAa,sCAAsC,EAAE,OAAO;CAC1D,UAAU;CACV,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACrC,WAAW,EAAE,OAAO,QAAQ,CAAC,UAAU;CACvC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACxC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,kBAAkB,8BAA8B,UAAU;CAC1D,4BAA4B,sCAAsC,UAAU;CAC7E,CAAC;;;;;AAOF,MAAa,yBAAyB,EACnC,OAAO;CAIN,SAAS,EAAE,QAAQ,CAAC,QAAQ,MAAM,MAAM,GAAG,EAAE,SAAS,6CAA6C,CAAC;CAKpG,0BAA0B,EAAE,OAAO,EAAE,QAAQ,EAAE,oCAAoC,CAAC,UAAU;CAM9F,SAAS,uBAAuB,OAAO,CAAC,MACtC,EAAE,UAAU,GAAG,EAAE,SAAS,iDAAiD,CAAC,CAC7E;CAMD,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB,CAAC,UAAU;CAMrE,0BAA0B,EAAE,SAAS,CAAC,UAAU;CACjD,CAAC,CACD,WAAW,OAAO,EAAE,eAAe;CAKlC,MAAM,gBAAgB;EAAC;EAAa;EAAiB;EAAkB;EAA2B;AAClG,KAAI,MAAM,2BACR;OAAK,MAAM,UAAU,MAAM,QACzB,MAAK,MAAM,OAAO,cAChB,KAAI,OAAO,OACT,UACE,QAAQ,IAAI,uHACb;;AAMT,QAAO;EACP;AAIJ,SAAgB,aAAa,QAA0B,YAAwC;CAC7F,MAAMC,UAA8B,EAAE;AAGtC,MAAK,MAAM,UAAU,OAAO,SAAS;AAInC,MAAI,OAAO,OACT,MAAK,MAAM,aAAa,OAAO,QAAQ;AACrC,aAAU,WAAW;AAErB,aAAU,mCAAkB,IAAI,MAAM,EAAC,aAAa;;AAIxD,UAAQ,KAAK,OAAO;;AAEtB,QAAO;;AAGT,eAAsB,gBACpB,QACA,gBAC6C;CAE7C,MAAMC,aAAiD,EAAE;AACzD,MAAK,MAAM,CAAC,KAAK,aAAa,OAAO,QAAQ,OAAO,cAAc,EAAE,CAAC,EAAE;EACrE,MAAM,UAAU,EAAE,GAAG,UAAU;EAC/B,MAAM,EAAE,SAAS;AAGjB,MAAI,SAAS,sBAAsB,CAAC,QAAQ,aAC1C,OAAM,IAAI,MAAM,2DAA2D,KAAK,cAAc;AAIhG,MAAI,SAAS,oBAAoB,CAAC,QAAQ,KACxC,OAAM,IAAI,MAAM,mDAAmD,IAAI,cAAc;AAIvF,UAAQ,WAAW,MAAM,mBAAmB;GAAE,OAAO,QAAQ;GAA0B;GAAgB,CAAC;AACxG,UAAQ,WAAW,MAAM,mBAAmB;GAAE,OAAO,QAAQ;GAA0B;GAAgB,CAAC;AACxG,UAAQ,MAAM,MAAM,mBAAmB;GAAE,OAAO,QAAQ;GAAqB;GAAgB,CAAC;AAC9F,UAAQ,QAAQ,MAAM,mBAAmB;GAAE,OAAO,QAAQ;GAAuB;GAAgB,CAAC;EAOlG,MAAM,MAAM,QAAQ;AACpB,MAAI,CAAC,OAAO,SAAS,mBACnB,OAAM,IAAI,MAAM,kDAAkD,IAAI,cAAc;AAEtF,MAAI,KAAK;AAaP,OAAI,IAAI,SAAS,IAAI,EAAE;IACrB,MAAM,YAAY,IAAI,IAAI,IAAI;AAG9B,QADoB,SAAS,qBAAqB,SAAS,eAC1C,SAAQ,WAAW,IAAI,QAAQ,YAAY,GAAG,CAAC,QAAQ,WAAW,GAAG;AAGtF,QADgB,SAAS,yBAAyB,SAAS,qBAC9C,SAAQ,OAAO,UAAU;;AAGxC,OAAI,SAAS,eAAgB,SAAQ,eAAe;AAOpD,OAJE,SAAS,qBACT,SAAS,kBACT,SAAS,wBACT,SAAS,eACI,QAAO,QAAQ;;AAIhC,aAAW,OAAO;;AAEpB,QAAO;;AAGT,SAAgB,sBAAsB,SAA6B,YAAgD;CACjH,MAAM,aAAa,OAAO,KAAK,WAAW;CAC1C,MAAMC,aAAuB,EAAE;AAC/B,MAAK,MAAM,KAAK,QAAS,YAAW,KAAK,GAAI,EAAE,cAAc,EAAE,CAAE;CAGjE,MAAM,uBAAuB,WAAW,QAAQ,OAAO,CAAC,WAAW,SAAS,GAAG,CAAC;AAChF,KAAI,qBAAqB,SAAS,EAChC,OAAM,IAAI,MACR,2BAA2B,qBAAqB,KAAK,IAAI,CAAC,0DAC3D;CAIH,MAAM,oBAAoB,WAAW,QAAQ,OAAO,CAAC,WAAW,SAAS,GAAG,CAAC;AAC7E,KAAI,kBAAkB,SAAS,EAC7B,OAAM,IAAI,MAAM,gBAAgB,kBAAkB,KAAK,IAAI,CAAC,0CAA0C;;;;;;AAQ1G,MAAa,6BAA6B;CACxC;CACA;CACA;CACA;CACD;;;;;AAMD,eAAsB,sBAAsB,EAC1C,gBACA,YACA,kBAK4B;CAE5B,MAAM,eAAe,KAAK,KAAK,eAAe;AAC9C,KAAI,iBAAiB,QAAQ,OAAO,iBAAiB,SACnD,OAAM,IAAI,MAAM,mCAAmC;CAIrD,MAAM,SAAS,MAAM,uBAAuB,WAAW,aAAa;CACpE,MAAM,UAAU,aAAa,QAAQ,WAAW;CAChD,MAAM,aAAa,MAAM,gBAAgB,QAAQ,eAAe;AAChE,uBAAsB,SAAS,WAAW;AAE1C,QAAO;EAAE,GAAG;EAAQ;EAAS;EAAY;;;;;ACtc3C,MAAa,6BAA6B,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC;AAGvE,MAAa,6BAA6B,EAAE,OAAO;CACjD,MAAM,EAAE,QAAQ;CAChB,KAAK,EAAE,QAAQ;CAChB,CAAC;AAGF,MAAa,8BAA8B,EAAE,OAAO;CAClD,iBAAiB,2BAA2B,OAAO;CACnD,IAAI;CACL,CAAC;AAGF,MAAa,iCAAiC,EAAE,KAAK,CAAC,QAAQ,CAAC;AAG/D,MAAa,yBAAyB,EAAE,OAAO;CAC7C,UAAU;CACV,MAAM,EAAE,QAAQ;CAChB,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CACzC,QAAQ,EAAE,QAAQ,CAAC,SAAS;CAC5B,QAAQ,EAAE,QAAQ,CAAC,SAAS;CAC5B,UAAU,EAAE,QAAQ,CAAC,SAAS;CAC9B,gBAAgB,EAAE,QAAQ,CAAC,SAAS;CACrC,CAAC;AAGF,MAAa,6BAA6B,EAAE,OAAO;CACjD,mBAAmB,EAAE,QAAQ;CAC7B,sBAAsB,EAAE,QAAQ,CAAC,SAAS;CAC1C,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,SAAS,EAAE,SAAS,CAAC,SAAS;CAC/B,CAAC;AAGF,MAAa,kCAAkC,EAAE,OAAO;CACtD,yBAAyB,EAAE,QAAQ;CACnC,cAAc,2BAA2B,OAAO;CACjD,CAAC;AAGF,MAAa,0BAA0B,EAAE,OAAO;CAC9C,mBAAmB,EAAE,QAAQ,CAAC,SAAS;CACvC,mBAAmB,EAAE,QAAQ,CAAC,SAAS;CACvC,eAAe,EAAE,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC,UAAU;CACtD,CAAC;AAGF,MAAa,+BAA+B,EAAE,OAAO;CACnD,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CACtC,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CAChD,mBAAmB,EAAE,QAAQ,CAAC,SAAS;CACvC,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CAC7C,CAAC;AAGF,MAAa,2BAA2B,EAAE,OAAO;CAC/C,MAAM,EAAE,QAAQ;CAChB,cAAc,EAAE,QAAQ,CAAC,SAAS;CAClC,OAAO;CACR,CAAC;AAGF,MAAa,4BAA4B,EAAE,OAAO;CAChD,mBAAmB,EAAE,QAAQ;CAC7B,QAAQ,EAAE,QAAQ,CAAC,SAAS;CAC5B,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CAC5C,cAAc,EAAE,OAAO,QAAQ,CAAC,SAAS;CACzC,uBAAuB,EAAE,QAAQ,CAAC,SAAS;CAC5C,CAAC;AAGF,MAAa,mCAAmC,EAAE,OAAO;CACvD,mBAAmB,EAAE,QAAQ;CAC7B,qBAAqB,EAAE,QAAQ,CAAC,OAAO;CACvC,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CAChD,uBAAuB,EAAE,QAAQ,CAAC,OAAO;CAC1C,CAAC;AAGF,MAAa,oCAAoC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC;AAG9E,MAAa,8BAA8B,EAAE,OAAO;CAClD,MAAM,EAAE,QAAQ,CAAC,SAAS;CAC1B,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CACpC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CACjD,aAAa,EAAE,QAAQ,CAAC,SAAS;CACjC,QAAQ,kCAAkC,SAAS;CACnD,SAAS,EAAE,QAAQ,CAAC,SAAS;CAC7B,oBAAoB,EAAE,QAAQ,CAAC,SAAS;CACzC,CAAC;AAGF,MAAa,6BAA6B,EAAE,OAAO;CACjD,MAAM,EAAE,QAAQ;CAChB,yBAAyB,4BAA4B,OAAO,CAAC,SAAS;CACtE,oBAAoB,EAAE,QAAQ,CAAC,SAAS;CACxC,SAAS,EAAE,QAAQ,CAAC,SAAS;CAC7B,cAAc,4BAA4B,OAAO,CAAC,SAAS;CAC3D,SAAS,EAAE,SAAS,CAAC,SAAS;CAC9B,WAAW,EAAE,QAAQ,CAAC,SAAS;CAChC,CAAC;AAGF,MAAa,gCAAgC,EAAE,OAAO;CACpD,QAAQ,EAAE,QAAQ,CAAC,SAAS;CAC5B,sBAAsB,EAAE,QAAQ,CAAC,SAAS;CAC1C,iBAAiB,EAAE,SAAS,CAAC,SAAS;CACvC,CAAC;AAGF,MAAa,8BAA8B,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;AAGnG,MAAa,iCAAiC,EAAE,KAAK;CAGnD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAa,0BAA0B,EAAE,KAAK;CAAC;CAAS;CAAW;CAAW,CAAC;AAK/E,MAAa,4BAA4B,EAAE,OAAO;CAChD,IAAI,EAAE,QAAQ,CAAC,UAAU;CACzB,SAAS,wBAAwB,UAAU;CAC3C,mBAAmB;CACnB,mBAAmB,wBAAwB,OAAO;CAClD,OAAO,EAAE,SAAS,CAAC,UAAU;CAC7B,qBAAqB,yBAAyB,OAAO,CAAC,SAAS;CAC/D,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CAC3C,+BAA+B,EAAE,QAAQ,CAAC,SAAS;CACnD,0BAA0B,2BAA2B,OAAO,CAAC,OAAO;CACpE,gCAAgC,gCAAgC,OAAO;CACvE,aAAa;CACb,qBAAqB,0BAA0B,OAAO;CACtD,iBAAiB,EAAE,SAAS;CAC5B,gCAAgC,EAAE,QAAQ,CAAC,UAAU;CACrD,uBAAuB,iCAAiC,OAAO;CAC/D,yBAAyB,EAAE,SAAS;CACpC,QAAQ;CACR,0BAA0B,EAAE,SAAS;CACrC,2BAA2B,EAAE,SAAS;CACtC,uBAAuB,EAAE,SAAS;CAClC,wBAAwB,EAAE,SAAS,CAAC,SAAS;CAC7C,gBAAgB,EAAE,SAAS;CAC3B,0BAA0B;CAC1B,wBAAwB,2BAA2B,OAAO,CAAC,SAAS;CACpE,wBAAwB,EAAE,KAAK,CAAC,SAAS;CACzC,UAAU,yBAAyB,SAAS;CAC5C,2CAA2C,EAAE,SAAS,CAAC,SAAS;CAChE,0BAA0B,EAAE,SAAS,CAAC,SAAS;CAC/C,0BAA0B,EAAE,SAAS,CAAC,SAAS;CAC/C,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CAC/C,CAAC;AAGF,MAAa,0BAA0B,EAAE,OAAO,EAC9C,KAAK,2BACN,CAAC"}

package/dist/logger-bWnHxtAf.js

@@ -1,31 +0,0 @@
-import { t as environment } from "./environment-DX5CD-dD.js";
-import pino from "pino";
-import { PinoPretty } from "pino-pretty";
-
-//#region src/logger.ts
-const options = {
-	level: process.env.LOG_LEVEL || (environment.production ? "warn" : "debug"),
-	base: {
-		env: environment.name,
-		sha: environment.sha,
-		branch: environment.branch
-	}
-};
-const destination = environment.production ? void 0 : PinoPretty({
-	colorize: true,
-	sync: environment.test
-});
-const logger = pino(options, destination);
-/**
-* Creates a logger for the application.
-* @param options - The options for creating the logger.
-* @returns The created logger.
-*/
-function create({ name }) {
-	const application = `paklo-${name}`;
-	return logger.child({ application }, { level: environment.production ? "warn" : "debug" });
-}
-
-//#endregion
-export { logger as n, create as t };
-//# sourceMappingURL=logger-bWnHxtAf.js.map

package/dist/logger-bWnHxtAf.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"logger-bWnHxtAf.js","names":["options: LoggerOptions","destination: DestinationStream | undefined"],"sources":["../src/logger.ts"],"sourcesContent":["import pino, { type DestinationStream, type Logger, type LoggerOptions } from 'pino';\nimport { PinoPretty } from 'pino-pretty';\n\nimport { environment } from '@/environment';\n\nconst options: LoggerOptions = {\n  level: process.env.LOG_LEVEL || (environment.production ? 'warn' : 'debug'),\n  base: {\n    env: environment.name,\n    sha: environment.sha,\n    branch: environment.branch,\n  },\n};\n\n// pino-pretty has issues with nextjs and we cannot fix in webpack because we are moving to turbopack\n// https://github.com/pinojs/pino/issues/1841#issuecomment-1815284760\n// https://github.com/vercel/next.js/discussions/46987\nconst destination: DestinationStream | undefined = environment.production\n  ? undefined\n  : PinoPretty({\n      colorize: true,\n      // https://github.com/pinojs/pino-pretty#usage-with-jest\n      sync: environment.test,\n    });\nexport const logger = pino(options, destination);\n\n/** Options for creating a logger. */\nexport type CreateOptions = {\n  /**\n   * The name of the application.\n   * @example `website`\n   */\n  name: string;\n};\n\n/**\n * Creates a logger for the application.\n * @param options - The options for creating the logger.\n * @returns The created logger.\n */\nexport function create({ name }: CreateOptions): Logger {\n  const application = `paklo-${name}`;\n  return logger.child({ application }, { level: environment.production ? 'warn' : 'debug' });\n}\n"],"mappings":";;;;;AAKA,MAAMA,UAAyB;CAC7B,OAAO,QAAQ,IAAI,cAAc,YAAY,aAAa,SAAS;CACnE,MAAM;EACJ,KAAK,YAAY;EACjB,KAAK,YAAY;EACjB,QAAQ,YAAY;EACrB;CACF;AAKD,MAAMC,cAA6C,YAAY,aAC3D,SACA,WAAW;CACT,UAAU;CAEV,MAAM,YAAY;CACnB,CAAC;AACN,MAAa,SAAS,KAAK,SAAS,YAAY;;;;;;AAgBhD,SAAgB,OAAO,EAAE,QAA+B;CACtD,MAAM,cAAc,SAAS;AAC7B,QAAO,OAAO,MAAM,EAAE,aAAa,EAAE,EAAE,OAAO,YAAY,aAAa,SAAS,SAAS,CAAC"}