@paysdoc/devplatform 1.0.0

package/dist/providers/github/appAuth.js

@@ -0,0 +1,243 @@
+/**
+ * GitHub App token mint — GitHub forge adapter (issue #792; originally
+ * absorbed into the gitContext package by issue #700).
+ *
+ * This module is structurally exempt from the git/gh guard
+ * (adws/providers/github/ is skipped by directory). It owns the JWT dance and
+ * installation-token exchange; callers should route through
+ * resolveContextToken for veracity.
+ *
+ * Configuration is INJECTED, never read from process.env — see
+ * {@link GitHubAppConfig}. The ADW wiring shim (adws/github/githubAppAuth.ts)
+ * is the sole site that reads GITHUB_APP_ID/GITHUB_APP_SLUG/
+ * GITHUB_APP_PRIVATE_KEY_PATH and passes them in as a value.
+ *
+ * No ADW-global imports. The log seam defaults to a no-op to keep the package
+ * standalone-reusable.
+ *
+ * The bearer credential travels to curl over its `--config` stdin channel —
+ * never as a command-line argument — so it cannot appear in a thrown
+ * `execFileSync` error or in the process table (issue #780).
+ */
+import * as crypto from 'crypto';
+import * as fs from 'fs';
+import { execFileSync } from 'child_process';
+/** Cache of installation tokens keyed by `owner/repo`. */
+const tokenCache = new Map();
+/** Cache of installation IDs keyed by `owner/repo`. */
+const installationIdCache = new Map();
+/** Refresh the token 5 minutes before it expires. */
+const REFRESH_BUFFER_MS = 5 * 60 * 1000;
+/** Production GitHub API origin. Overridable via AppAuthDeps.apiBaseUrl for hermetic testing. */
+export const GITHUB_API_BASE_URL = 'https://api.github.com';
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/** Returns true if the injected GitHub App configuration is complete. */
+export function isGitHubAppConfigured(config) {
+    return Boolean(config.appId && config.appSlug && config.privateKeyPath);
+}
+/**
+ * Returns a valid GitHub App installation token for the given repo,
+ * refreshing if needed. Throws if the App is not installed on owner/repo.
+ *
+ * Assumes `isGitHubAppConfigured(config)` was checked first, exactly as
+ * before configuration was injected — but fails with a named error rather
+ * than a `TypeError` from `fs.readFileSync(undefined)` if it was not.
+ */
+export function getInstallationToken(config, owner, repo, deps = {}) {
+    if (!config.appId || !config.privateKeyPath) {
+        throw new Error(`getInstallationToken: GitHub App is not configured (missing ${!config.appId ? 'appId' : 'privateKeyPath'})`);
+    }
+    const appId = config.appId;
+    const keyPath = config.privateKeyPath;
+    const key = `${owner}/${repo}`;
+    const cached = tokenCache.get(key);
+    if (cached && cached.expiresAt.getTime() - Date.now() > REFRESH_BUFFER_MS) {
+        return cached.token;
+    }
+    const runCurl = deps.runCurl ?? execCurl;
+    const baseUrl = deps.apiBaseUrl ?? GITHUB_API_BASE_URL;
+    const jwt = createAppJWT(appId, keyPath);
+    const installationId = resolveInstallationId(jwt, owner, repo, baseUrl, runCurl);
+    const tokenEntry = fetchInstallationToken(jwt, installationId, baseUrl, runCurl);
+    tokenCache.set(key, tokenEntry);
+    return tokenEntry.token;
+}
+/** Clears both module-level caches. Test-only — production never needs to reset them. */
+export function clearAppAuthCaches() {
+    tokenCache.clear();
+    installationIdCache.clear();
+}
+// ---------------------------------------------------------------------------
+// Sanitized GitHub API request helpers — the credential travels on curl's
+// `--config` stdin channel, never as a command-line argument, so it cannot
+// appear in a thrown execFileSync error or in `ps` output. Failure messages
+// are composed from the HTTP status and, at most, GitHub's `message` field —
+// never a raw response body.
+// ---------------------------------------------------------------------------
+const BEARER_PATTERN = /Bearer\s+\S+/g;
+/** Rewrites any `Bearer <token>` fragment to `Bearer [REDACTED]`. Final net over untrusted text (curl stderr, GitHub error bodies) — the credential is already structurally absent by construction. */
+export function redactBearerTokens(text) {
+    return text.replace(BEARER_PATTERN, 'Bearer [REDACTED]');
+}
+/** Builds a curl `--config` payload carrying the URL, headers (including the bearer credential) and method — never a command-line argument. */
+export function buildCurlConfig(request) {
+    const lines = [
+        'silent',
+        'show-error',
+        `header = "Authorization: Bearer ${request.jwt}"`,
+        'header = "Accept: application/vnd.github+json"',
+        'header = "X-GitHub-Api-Version: 2022-11-28"',
+        'write-out = "\\n%{http_code}"',
+        `url = "${request.url}"`,
+    ];
+    if (request.method === 'POST') {
+        lines.push('request = "POST"');
+    }
+    return `${lines.join('\n')}\n`;
+}
+/** Composes the sanitized failure shape the issue asks for: `GitHub App <operation> failed for <subject>: <detail>`. */
+export function describeApiFailure(input) {
+    return `GitHub App ${input.operation} failed for ${input.subject}: ${redactBearerTokens(input.detail)}`;
+}
+/**
+ * Non-echoing detail builder for a non-2xx response — at most GitHub's own
+ * `message` field (fixed vocabulary: "Not Found", "Bad credentials", ...),
+ * never the raw body, since a body may itself carry a credential under an
+ * unexpected key.
+ */
+function describeStatus(status, body) {
+    try {
+        const parsed = JSON.parse(body);
+        if (parsed && typeof parsed === 'object' && 'message' in parsed) {
+            const message = parsed.message;
+            if (typeof message === 'string') {
+                return `HTTP ${status} (${redactBearerTokens(message)})`;
+            }
+        }
+        return `HTTP ${status}`;
+    }
+    catch {
+        return `HTTP ${status} (${body.length} bytes, unparseable)`;
+    }
+}
+const CURL_ARGS = ['--config', '-'];
+const execCurl = (args, stdinConfig) => execFileSync('curl', [...args], {
+    input: stdinConfig,
+    encoding: 'utf-8',
+    stdio: ['pipe', 'pipe', 'pipe'],
+});
+function isCurlExecError(error) {
+    return typeof error === 'object' && error !== null && 'message' in error;
+}
+/** Single chokepoint for every GitHub API call. Never lets a credential-bearing subprocess error escape unsanitized. */
+function requestGitHubApi(request, runCurl) {
+    let raw;
+    try {
+        raw = runCurl(CURL_ARGS, buildCurlConfig(request));
+    }
+    catch (error) {
+        const status = isCurlExecError(error) && typeof error.status === 'number' ? error.status : -1;
+        const stderrRaw = isCurlExecError(error) && error.stderr !== undefined
+            ? (typeof error.stderr === 'string' ? error.stderr : error.stderr.toString('utf-8'))
+            : '';
+        throw new Error(describeApiFailure({
+            operation: request.operation,
+            subject: request.subject,
+            detail: `curl exit ${status} (${redactBearerTokens(stderrRaw.trim())})`,
+        }));
+    }
+    const cut = raw.lastIndexOf('\n');
+    if (cut < 0) {
+        throw new Error(describeApiFailure({
+            operation: request.operation,
+            subject: request.subject,
+            detail: 'no HTTP status returned',
+        }));
+    }
+    return { status: Number(raw.slice(cut + 1).trim()), body: raw.slice(0, cut) };
+}
+/** Parses a response body, rethrowing a sanitized failure on malformed JSON. */
+function parseJsonBody(body, context) {
+    try {
+        return JSON.parse(body);
+    }
+    catch {
+        throw new Error(describeApiFailure({
+            operation: context.operation,
+            subject: context.subject,
+            detail: `HTTP ${context.status} — unparseable response body (${body.length} bytes)`,
+        }));
+    }
+}
+// Private mint internals
+function createAppJWT(appId, privateKeyPath) {
+    const privateKey = fs.readFileSync(privateKeyPath, 'utf-8');
+    const now = Math.floor(Date.now() / 1000);
+    const header = { alg: 'RS256', typ: 'JWT' };
+    const payload = { iat: now - 60, exp: now + 600, iss: appId };
+    const encode = (obj) => Buffer.from(JSON.stringify(obj)).toString('base64url');
+    const headerB64 = encode(header);
+    const payloadB64 = encode(payload);
+    const signingInput = `${headerB64}.${payloadB64}`;
+    const signature = crypto
+        .createSign('RSA-SHA256')
+        .update(signingInput)
+        .sign(privateKey, 'base64url');
+    return `${signingInput}.${signature}`;
+}
+function resolveInstallationId(jwt, owner, repo, baseUrl, runCurl) {
+    const key = `${owner}/${repo}`;
+    const cached = installationIdCache.get(key);
+    if (cached)
+        return cached;
+    const { status, body } = requestGitHubApi({
+        jwt,
+        url: `${baseUrl}/repos/${owner}/${repo}/installation`,
+        method: 'GET',
+        operation: 'installation lookup',
+        subject: key,
+    }, runCurl);
+    if (status < 200 || status >= 300) {
+        throw new Error(describeApiFailure({ operation: 'installation lookup', subject: key, detail: describeStatus(status, body) }));
+    }
+    const parsed = parseJsonBody(body, { operation: 'installation lookup', subject: key, status });
+    if (!parsed.id) {
+        throw new Error(describeApiFailure({
+            operation: 'installation lookup',
+            subject: key,
+            detail: `HTTP ${status} — response did not contain an installation id (${body.length} bytes)`,
+        }));
+    }
+    const id = String(parsed.id);
+    installationIdCache.set(key, id);
+    return id;
+}
+function fetchInstallationToken(jwt, installationId, baseUrl, runCurl) {
+    const subject = `installation ${installationId}`;
+    const { status, body } = requestGitHubApi({
+        jwt,
+        url: `${baseUrl}/app/installations/${installationId}/access_tokens`,
+        method: 'POST',
+        operation: 'token exchange',
+        subject,
+    }, runCurl);
+    if (status < 200 || status >= 300) {
+        throw new Error(describeApiFailure({ operation: 'token exchange', subject, detail: describeStatus(status, body) }));
+    }
+    const parsed = parseJsonBody(body, { operation: 'token exchange', subject, status });
+    if (!parsed.token) {
+        throw new Error(describeApiFailure({
+            operation: 'token exchange',
+            subject,
+            detail: `HTTP ${status} — response did not contain an installation token (${body.length} bytes)`,
+        }));
+    }
+    return {
+        token: parsed.token,
+        expiresAt: new Date(parsed.expires_at ?? ''),
+        installationId,
+    };
+}
+//# sourceMappingURL=appAuth.js.map

package/dist/providers/github/appAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appAuth.js","sourceRoot":"","sources":["../../../src/providers/github/appAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAgB7C,0DAA0D;AAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;AAElD,uDAAuD;AACvD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEtD,qDAAqD;AACrD,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAaxC,iGAAiG;AACjG,MAAM,CAAC,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;AAE5D,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,yEAAyE;AACzE,MAAM,UAAU,qBAAqB,CAAC,MAAuB;IAC3D,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAuB,EAAE,KAAa,EAAE,IAAY,EAAE,OAAoB,EAAE;IAC/G,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,+DAA+D,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,GAAG,CAC7G,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;IAE/B,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,EAAE,CAAC;QAC1E,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAEvD,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,qBAAqB,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACjF,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAEhC,OAAO,UAAU,CAAC,KAAK,CAAC;AAC1B,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,kBAAkB;IAChC,UAAU,CAAC,KAAK,EAAE,CAAC;IACnB,mBAAmB,CAAC,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,6EAA6E;AAC7E,6BAA6B;AAC7B,8EAA8E;AAE9E,MAAM,cAAc,GAAG,eAAe,CAAC;AAEvC,uMAAuM;AACvM,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;AAC3D,CAAC;AAYD,+IAA+I;AAC/I,MAAM,UAAU,eAAe,CAAC,OAAyB;IACvD,MAAM,KAAK,GAAG;QACZ,QAAQ;QACR,YAAY;QACZ,mCAAmC,OAAO,CAAC,GAAG,GAAG;QACjD,gDAAgD;QAChD,6CAA6C;QAC7C,+BAA+B;QAC/B,UAAU,OAAO,CAAC,GAAG,GAAG;KACzB,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,wHAAwH;AACxH,MAAM,UAAU,kBAAkB,CAAC,KAA6D;IAC9F,OAAO,cAAc,KAAK,CAAC,SAAS,eAAe,KAAK,CAAC,OAAO,KAAK,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;AAC1G,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,MAAc,EAAE,IAAY;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;YAChE,MAAM,OAAO,GAAI,MAA+B,CAAC,OAAO,CAAC;YACzD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,QAAQ,MAAM,KAAK,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,MAAM,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,MAAM,KAAK,IAAI,CAAC,MAAM,sBAAsB,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,SAAS,GAAsB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AAEvD,MAAM,QAAQ,GAAY,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAC9C,YAAY,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;IAC9B,KAAK,EAAE,WAAW;IAClB,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;CAChC,CAAC,CAAC;AAaL,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,SAAS,IAAI,KAAK,CAAC;AAC3E,CAAC;AAED,wHAAwH;AACxH,SAAS,gBAAgB,CAAC,OAAyB,EAAE,OAAgB;IACnE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YACpE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACpF,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC;YACjC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,aAAa,MAAM,KAAK,kBAAkB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,GAAG;SACxE,CAAC,CAAC,CAAC;IACN,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC;YACjC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,yBAAyB;SAClC,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,gFAAgF;AAChF,SAAS,aAAa,CAAI,IAAY,EAAE,OAA+D;IACrG,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC;YACjC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,MAAM,EAAE,QAAQ,OAAO,CAAC,MAAM,iCAAiC,IAAI,CAAC,MAAM,SAAS;SACpF,CAAC,CAAC,CAAC;IACN,CAAC;AACH,CAAC;AAED,yBAAyB;AACzB,SAAS,YAAY,CAAC,KAAa,EAAE,cAAsB;IACzD,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAE9D,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAElD,MAAM,SAAS,GAAG,MAAM;SACrB,UAAU,CAAC,YAAY,CAAC;SACxB,MAAM,CAAC,YAAY,CAAC;SACpB,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAEjC,OAAO,GAAG,YAAY,IAAI,SAAS,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW,EAAE,KAAa,EAAE,IAAY,EAAE,OAAe,EAAE,OAAgB;IACxG,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CACvC;QACE,GAAG;QACH,GAAG,EAAE,GAAG,OAAO,UAAU,KAAK,IAAI,IAAI,eAAe;QACrD,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,qBAAqB;QAChC,OAAO,EAAE,GAAG;KACb,EACD,OAAO,CACR,CAAC;IAEF,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAChI,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAkB,IAAI,EAAE,EAAE,SAAS,EAAE,qBAAqB,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAChH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC;YACjC,SAAS,EAAE,qBAAqB;YAChC,OAAO,EAAE,GAAG;YACZ,MAAM,EAAE,QAAQ,MAAM,mDAAmD,IAAI,CAAC,MAAM,SAAS;SAC9F,CAAC,CAAC,CAAC;IACN,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7B,mBAAmB,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW,EAAE,cAAsB,EAAE,OAAe,EAAE,OAAgB;IACpG,MAAM,OAAO,GAAG,gBAAgB,cAAc,EAAE,CAAC;IAEjD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CACvC;QACE,GAAG;QACH,GAAG,EAAE,GAAG,OAAO,sBAAsB,cAAc,gBAAgB;QACnE,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,gBAAgB;QAC3B,OAAO;KACR,EACD,OAAO,CACR,CAAC;IAEF,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACtH,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAA0C,IAAI,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9H,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC;YACjC,SAAS,EAAE,gBAAgB;YAC3B,OAAO;YACP,MAAM,EAAE,QAAQ,MAAM,sDAAsD,IAAI,CAAC,MAAM,SAAS;SACjG,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;QAC5C,cAAc;KACf,CAAC;AACJ,CAAC"}

package/dist/providers/github/cloneUrl.d.ts

@@ -0,0 +1,12 @@
+/**
+ * GitHub clone-URL construction (issue #793, PRD story 14) — the HTTPS→SSH
+ * rewrite the core used to apply silently. ADW's wiring layer
+ * (`adws/core/targetRepoManager.ts`) calls this before handing the core a
+ * clone URL; the core itself clones exactly what it is given.
+ */
+/**
+ * Converts an HTTPS GitHub clone URL to SSH format.
+ * Non-HTTPS URLs (e.g., already SSH, another forge, empty) are returned unchanged.
+ */
+export declare function convertToSshUrl(cloneUrl: string): string;
+//# sourceMappingURL=cloneUrl.d.ts.map

package/dist/providers/github/cloneUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloneUrl.d.ts","sourceRoot":"","sources":["../../../src/providers/github/cloneUrl.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH;;;GAGG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAKxD"}

package/dist/providers/github/cloneUrl.js

@@ -0,0 +1,20 @@
+/**
+ * GitHub clone-URL construction (issue #793, PRD story 14) — the HTTPS→SSH
+ * rewrite the core used to apply silently. ADW's wiring layer
+ * (`adws/core/targetRepoManager.ts`) calls this before handing the core a
+ * clone URL; the core itself clones exactly what it is given.
+ */
+import { parseGitHubRemoteUrl } from './githubIdentity.js';
+/**
+ * Converts an HTTPS GitHub clone URL to SSH format.
+ * Non-HTTPS URLs (e.g., already SSH, another forge, empty) are returned unchanged.
+ */
+export function convertToSshUrl(cloneUrl) {
+    if (!cloneUrl.startsWith('https://github.com/'))
+        return cloneUrl;
+    const info = parseGitHubRemoteUrl(cloneUrl);
+    if (!info)
+        return cloneUrl;
+    return `git@github.com:${info.owner}/${info.repo}.git`;
+}
+//# sourceMappingURL=cloneUrl.js.map

package/dist/providers/github/cloneUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloneUrl.js","sourceRoot":"","sources":["../../../src/providers/github/cloneUrl.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAE3D;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,qBAAqB,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjE,MAAM,IAAI,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI;QAAE,OAAO,QAAQ,CAAC;IAC3B,OAAO,kBAAkB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC;AACzD,CAAC"}

package/dist/providers/github/commands/boardCommands.d.ts

@@ -0,0 +1,22 @@
+export declare function graphQLInputCmd(): string;
+export declare function graphQLCmd(query: string, variables?: Record<string, string | number>): string;
+export declare function projectQueryCmd(owner: string, repo: string): string;
+export declare function itemQueryCmd(owner: string, repo: string, issueNumber: number): string;
+export declare function fieldQueryCmd(projectId: string): string;
+export declare function moveStatusCmd(projectId: string, itemId: string, fieldId: string, optionId: string): string;
+export declare function parseProjectId(result: string): string | null;
+export declare function parseIssueItem(result: string, projectId: string): {
+    itemId: string;
+    currentStatus: string | null;
+} | null;
+/**
+ * Returns:
+ *   { fieldId, optionId } — proceed with the mutation
+ *   'already_at_status'   — fuzzy-resolved option name matches current status; no-op
+ *   null                  — no matching option found
+ */
+export declare function parseStatusField(result: string, targetStatus: string, currentStatus: string | null): {
+    fieldId: string;
+    optionId: string;
+} | 'already_at_status' | null;
+//# sourceMappingURL=boardCommands.d.ts.map

package/dist/providers/github/commands/boardCommands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boardCommands.d.ts","sourceRoot":"","sources":["../../../../src/providers/github/commands/boardCommands.ts"],"names":[],"mappings":"AAYA,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,MAAM,CAQ7F;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAErF;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1G;AAID,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM5D;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GAChB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAYzD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,GAAG,IAAI,GAC3B;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,mBAAmB,GAAG,IAAI,CAapE"}

package/dist/providers/github/commands/boardCommands.js

@@ -0,0 +1,66 @@
+// GraphQL query strings for Projects V2 board operations — GitHub forge adapter (#792).
+const QUERY_PROJECT = `query($owner:String!,$repo:String!){repository(owner:$owner,name:$repo){projectsV2(first:1){nodes{id}}}}`;
+const QUERY_ITEM = `query($owner:String!,$repo:String!,$number:Int!){repository(owner:$owner,name:$repo){issue(number:$number){projectItems(first:50){nodes{id project{id} fieldValueByName(name:"Status"){...on ProjectV2ItemFieldSingleSelectValue{name}}}}}}}`;
+const QUERY_FIELD = `query($projectId:ID!){node(id:$projectId){...on ProjectV2{field(name:"Status"){...on ProjectV2SingleSelectField{id options{id name}}}}}}`;
+const MUTATION_MOVE = `mutation($projectId:ID!,$itemId:ID!,$fieldId:ID!,$optionId:String!){updateProjectV2ItemFieldValue(input:{projectId:$projectId itemId:$itemId fieldId:$fieldId value:{singleSelectOptionId:$optionId}}){projectV2Item{id}}}`;
+// ── Command builders ───────────────────────────────────────────────────────
+export function graphQLInputCmd() {
+    return 'gh api graphql --input -';
+}
+export function graphQLCmd(query, variables) {
+    const varArgs = variables
+        ? Object.entries(variables)
+            .map(([k, v]) => (typeof v === 'number' ? `-F ${k}=${v}` : `-f ${k}='${v}'`))
+            .join(' ')
+        : '';
+    const sep = varArgs ? ' ' : '';
+    return `gh api graphql -f query='${query}'${sep}${varArgs}`;
+}
+export function projectQueryCmd(owner, repo) {
+    return `gh api graphql -f query='${QUERY_PROJECT}' -f owner='${owner}' -f repo='${repo}'`;
+}
+export function itemQueryCmd(owner, repo, issueNumber) {
+    return `gh api graphql -f query='${QUERY_ITEM}' -f owner='${owner}' -f repo='${repo}' -F number=${issueNumber}`;
+}
+export function fieldQueryCmd(projectId) {
+    return `gh api graphql -f query='${QUERY_FIELD}' -f projectId='${projectId}'`;
+}
+export function moveStatusCmd(projectId, itemId, fieldId, optionId) {
+    return `gh api graphql -f query='${MUTATION_MOVE}' -f projectId='${projectId}' -f itemId='${itemId}' -f fieldId='${fieldId}' -f optionId='${optionId}'`;
+}
+// ── Response parsers ───────────────────────────────────────────────────────
+export function parseProjectId(result) {
+    const parsed = JSON.parse(result);
+    const nodes = parsed?.data?.repository?.projectsV2?.nodes;
+    return (nodes && nodes.length > 0) ? nodes[0].id : null;
+}
+export function parseIssueItem(result, projectId) {
+    const parsed = JSON.parse(result);
+    const items = parsed?.data?.repository?.issue?.projectItems?.nodes ?? [];
+    const match = items.find((item) => item.project.id === projectId);
+    if (!match)
+        return null;
+    return { itemId: match.id, currentStatus: match.fieldValueByName?.name ?? null };
+}
+/**
+ * Returns:
+ *   { fieldId, optionId } — proceed with the mutation
+ *   'already_at_status'   — fuzzy-resolved option name matches current status; no-op
+ *   null                  — no matching option found
+ */
+export function parseStatusField(result, targetStatus, currentStatus) {
+    const parsed = JSON.parse(result);
+    const field = parsed?.data?.node?.field;
+    if (!field)
+        return null;
+    const target = targetStatus.toLowerCase();
+    const exact = field.options.find((o) => o.name.toLowerCase() === target);
+    const fuzzy = field.options.find((o) => o.name.toLowerCase().includes(target));
+    const matched = exact ?? fuzzy ?? null;
+    if (!matched)
+        return null;
+    if (currentStatus?.toLowerCase() === matched.name.toLowerCase())
+        return 'already_at_status';
+    return { fieldId: field.id, optionId: matched.id };
+}
+//# sourceMappingURL=boardCommands.js.map

package/dist/providers/github/commands/boardCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boardCommands.js","sourceRoot":"","sources":["../../../../src/providers/github/commands/boardCommands.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,MAAM,aAAa,GACjB,0GAA0G,CAAC;AAC7G,MAAM,UAAU,GACd,8OAA8O,CAAC;AACjP,MAAM,WAAW,GACf,0IAA0I,CAAC;AAC7I,MAAM,aAAa,GACjB,4NAA4N,CAAC;AAE/N,8EAA8E;AAE9E,MAAM,UAAU,eAAe;IAC7B,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,SAA2C;IACnF,MAAM,OAAO,GAAG,SAAS;QACvB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;aACtB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;aAC5E,IAAI,CAAC,GAAG,CAAC;QACd,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/B,OAAO,4BAA4B,KAAK,IAAI,GAAG,GAAG,OAAO,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,IAAY;IACzD,OAAO,4BAA4B,aAAa,eAAe,KAAK,cAAc,IAAI,GAAG,CAAC;AAC5F,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,IAAY,EAAE,WAAmB;IAC3E,OAAO,4BAA4B,UAAU,eAAe,KAAK,cAAc,IAAI,eAAe,WAAW,EAAE,CAAC;AAClH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,OAAO,4BAA4B,WAAW,mBAAmB,SAAS,GAAG,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,MAAc,EAAE,OAAe,EAAE,QAAgB;IAChG,OAAO,4BAA4B,aAAa,mBAAmB,SAAS,gBAAgB,MAAM,iBAAiB,OAAO,kBAAkB,QAAQ,GAAG,CAAC;AAC1J,CAAC;AAED,8EAA8E;AAE9E,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAE/B,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC;IAC1D,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,SAAiB;IAEjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAM/B,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC;IACzE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,gBAAgB,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;AACnF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,YAAoB,EACpB,aAA4B;IAE5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAE/B,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,KAAK,IAAI,KAAK,IAAI,IAAI,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,aAAa,EAAE,WAAW,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,mBAAmB,CAAC;IAC5F,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;AACrD,CAAC"}

package/dist/providers/github/commands/issueCommands.d.ts

@@ -0,0 +1,21 @@
+export interface ListOpenIssuesOptions {
+    readonly fields: readonly string[];
+    readonly search?: string;
+    readonly limit?: number;
+    readonly state?: 'open' | 'closed' | 'all';
+}
+export declare function listOpenIssuesCmd(owner: string, repo: string, opts: ListOpenIssuesOptions): string;
+export declare function issueCommentsCmd(owner: string, repo: string, issueNumber: number): string;
+export declare function fetchIssueCmd(owner: string, repo: string, issueNumber: number): string;
+export declare function commentOnIssueCmd(owner: string, repo: string, issueNumber: number): string;
+export declare function issueStateCmd(owner: string, repo: string, issueNumber: number): string;
+export declare function closeIssueCmd(owner: string, repo: string, issueNumber: number): string;
+export declare function issueTitleCmd(owner: string, repo: string, issueNumber: number): string;
+export declare function fetchIssueCommentsCmd(owner: string, repo: string, issueNumber: number): string;
+export declare function issueHasLabelCmd(owner: string, repo: string, issueNumber: number): string;
+export declare function addIssueLabelCmd(owner: string, repo: string, issueNumber: number, labelName: string): string;
+export declare function createIssueCmd(owner: string, repo: string, title: string): string;
+export declare function updateIssueBodyCmd(owner: string, repo: string, issueNumber: number): string;
+export declare function findOpenUpgradeIssueCmd(owner: string, repo: string): string;
+export declare function deleteIssueCommentCmd(owner: string, repo: string, commentId: number): string;
+//# sourceMappingURL=issueCommands.d.ts.map

package/dist/providers/github/commands/issueCommands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issueCommands.d.ts","sourceRoot":"","sources":["../../../../src/providers/github/commands/issueCommands.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;CAC5C;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAKlG;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAEzF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAE1F;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAEtF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAE9F;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAEzF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE5G;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAE3F;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE5F"}

package/dist/providers/github/commands/issueCommands.js

@@ -0,0 +1,50 @@
+// gh CLI command strings for issue read/write operations — GitHub forge adapter (#792).
+const ISSUE_FIELDS = 'number,title,body,state,author,assignees,labels,milestone,comments,createdAt,updatedAt,closedAt,url';
+export function listOpenIssuesCmd(owner, repo, opts) {
+    let cmd = `gh issue list --repo ${owner}/${repo} --state ${opts.state ?? 'open'} --json ${opts.fields.join(',')}`;
+    if (opts.search !== undefined)
+        cmd += ` --search "${opts.search}"`;
+    if (opts.limit !== undefined)
+        cmd += ` --limit ${opts.limit}`;
+    return cmd;
+}
+export function issueCommentsCmd(owner, repo, issueNumber) {
+    return `gh issue view ${issueNumber} --repo ${owner}/${repo} --json comments --jq '.comments'`;
+}
+export function fetchIssueCmd(owner, repo, issueNumber) {
+    return `gh issue view ${issueNumber} --repo ${owner}/${repo} --json ${ISSUE_FIELDS}`;
+}
+export function commentOnIssueCmd(owner, repo, issueNumber) {
+    return `gh issue comment ${issueNumber} --repo ${owner}/${repo} --body-file -`;
+}
+export function issueStateCmd(owner, repo, issueNumber) {
+    return `gh issue view ${issueNumber} --repo ${owner}/${repo} --json state`;
+}
+export function closeIssueCmd(owner, repo, issueNumber) {
+    return `gh issue close ${issueNumber} --repo ${owner}/${repo}`;
+}
+export function issueTitleCmd(owner, repo, issueNumber) {
+    return `gh issue view ${issueNumber} --repo ${owner}/${repo} --json title`;
+}
+export function fetchIssueCommentsCmd(owner, repo, issueNumber) {
+    return `gh api repos/${owner}/${repo}/issues/${issueNumber}/comments --paginate`;
+}
+export function issueHasLabelCmd(owner, repo, issueNumber) {
+    return `gh issue view ${issueNumber} --repo ${owner}/${repo} --json labels`;
+}
+export function addIssueLabelCmd(owner, repo, issueNumber, labelName) {
+    return `gh issue edit ${issueNumber} --repo ${owner}/${repo} --add-label ${labelName}`;
+}
+export function createIssueCmd(owner, repo, title) {
+    return `gh issue create --repo ${owner}/${repo} --title '${title}' --body-file -`;
+}
+export function updateIssueBodyCmd(owner, repo, issueNumber) {
+    return `gh issue edit ${issueNumber} --repo ${owner}/${repo} --body-file -`;
+}
+export function findOpenUpgradeIssueCmd(owner, repo) {
+    return `gh issue list --repo ${owner}/${repo} --label 'adw:upgrade' --state open --json number --limit 1`;
+}
+export function deleteIssueCommentCmd(owner, repo, commentId) {
+    return `gh api -X DELETE repos/${owner}/${repo}/issues/comments/${commentId}`;
+}
+//# sourceMappingURL=issueCommands.js.map

package/dist/providers/github/commands/issueCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issueCommands.js","sourceRoot":"","sources":["../../../../src/providers/github/commands/issueCommands.ts"],"names":[],"mappings":"AAAA,wFAAwF;AAExF,MAAM,YAAY,GAChB,qGAAqG,CAAC;AASxG,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAAY,EAAE,IAA2B;IACxF,IAAI,GAAG,GAAG,wBAAwB,KAAK,IAAI,IAAI,YAAY,IAAI,CAAC,KAAK,IAAI,MAAM,WAAW,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAClH,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,IAAI,cAAc,IAAI,CAAC,MAAM,GAAG,CAAC;IACnE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,GAAG,IAAI,YAAY,IAAI,CAAC,KAAK,EAAE,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,IAAY,EAAE,WAAmB;IAC/E,OAAO,iBAAiB,WAAW,WAAW,KAAK,IAAI,IAAI,mCAAmC,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,IAAY,EAAE,WAAmB;IAC5E,OAAO,iBAAiB,WAAW,WAAW,KAAK,IAAI,IAAI,WAAW,YAAY,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAAY,EAAE,WAAmB;IAChF,OAAO,oBAAoB,WAAW,WAAW,KAAK,IAAI,IAAI,gBAAgB,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,IAAY,EAAE,WAAmB;IAC5E,OAAO,iBAAiB,WAAW,WAAW,KAAK,IAAI,IAAI,eAAe,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,IAAY,EAAE,WAAmB;IAC5E,OAAO,kBAAkB,WAAW,WAAW,KAAK,IAAI,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,IAAY,EAAE,WAAmB;IAC5E,OAAO,iBAAiB,WAAW,WAAW,KAAK,IAAI,IAAI,eAAe,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,IAAY,EAAE,WAAmB;IACpF,OAAO,gBAAgB,KAAK,IAAI,IAAI,WAAW,WAAW,sBAAsB,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,IAAY,EAAE,WAAmB;IAC/E,OAAO,iBAAiB,WAAW,WAAW,KAAK,IAAI,IAAI,gBAAgB,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,IAAY,EAAE,WAAmB,EAAE,SAAiB;IAClG,OAAO,iBAAiB,WAAW,WAAW,KAAK,IAAI,IAAI,gBAAgB,SAAS,EAAE,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,IAAY,EAAE,KAAa;IACvE,OAAO,0BAA0B,KAAK,IAAI,IAAI,aAAa,KAAK,iBAAiB,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,IAAY,EAAE,WAAmB;IACjF,OAAO,iBAAiB,WAAW,WAAW,KAAK,IAAI,IAAI,gBAAgB,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAE,IAAY;IACjE,OAAO,wBAAwB,KAAK,IAAI,IAAI,6DAA6D,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,IAAY,EAAE,SAAiB;IAClF,OAAO,0BAA0B,KAAK,IAAI,IAAI,oBAAoB,SAAS,EAAE,CAAC;AAChF,CAAC"}

package/dist/providers/github/commands/labelCommands.d.ts

@@ -0,0 +1,3 @@
+export declare function createLabelCmd(owner: string, repo: string, name: string, color: string, description: string): string;
+export declare function applyLabelCmd(owner: string, repo: string, issueNumber: number, labelName: string): string;
+//# sourceMappingURL=labelCommands.d.ts.map

package/dist/providers/github/commands/labelCommands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"labelCommands.d.ts","sourceRoot":"","sources":["../../../../src/providers/github/commands/labelCommands.ts"],"names":[],"mappings":"AAEA,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAEpH;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEzG"}

package/dist/providers/github/commands/labelCommands.js

@@ -0,0 +1,8 @@
+// gh CLI command strings for label create/apply operations — GitHub forge adapter (#792).
+export function createLabelCmd(owner, repo, name, color, description) {
+    return `gh label create '${name}' --repo ${owner}/${repo} --color ${color} --description '${description}' --force`;
+}
+export function applyLabelCmd(owner, repo, issueNumber, labelName) {
+    return `gh issue edit ${issueNumber} --repo ${owner}/${repo} --add-label '${labelName}'`;
+}
+//# sourceMappingURL=labelCommands.js.map

package/dist/providers/github/commands/labelCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"labelCommands.js","sourceRoot":"","sources":["../../../../src/providers/github/commands/labelCommands.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAE1F,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,IAAY,EAAE,IAAY,EAAE,KAAa,EAAE,WAAmB;IAC1G,OAAO,oBAAoB,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,mBAAmB,WAAW,WAAW,CAAC;AACrH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,IAAY,EAAE,WAAmB,EAAE,SAAiB;IAC/F,OAAO,iBAAiB,WAAW,WAAW,KAAK,IAAI,IAAI,iBAAiB,SAAS,GAAG,CAAC;AAC3F,CAAC"}

package/dist/providers/github/commands/prCommands.d.ts

@@ -0,0 +1,14 @@
+export declare function findPRByBranchCmd(owner: string, repo: string, branchName: string): string;
+export declare function fetchPRDetailsCmd(owner: string, repo: string, prNumber: number): string;
+export declare function fetchPRReviewsCmd(owner: string, repo: string, prNumber: number): string;
+export declare function fetchPRReviewCommentsCmd(owner: string, repo: string, prNumber: number): string;
+export declare function commentOnPRCmd(owner: string, repo: string, prNumber: number): string;
+export declare function mergePRCmd(owner: string, repo: string, prNumber: number): string;
+export declare function approvePRCmd(owner: string, repo: string, prNumber: number): string;
+export declare function prApprovalStateCmd(owner: string, repo: string, prNumber: number): string;
+export declare function fetchPRListCmd(owner: string, repo: string): string;
+export declare function fetchAllPRsCmd(owner: string, repo: string): string;
+export declare function prChangedFilesCmd(owner: string, repo: string, prNumber: number): string;
+export declare function createPRCmd(owner: string, repo: string, title: string, headBranch: string, baseBranch?: string, labels?: readonly string[]): string;
+export declare function fetchMergedPRsCmd(owner: string, repo: string, limit?: number): string;
+//# sourceMappingURL=prCommands.d.ts.map

package/dist/providers/github/commands/prCommands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prCommands.d.ts","sourceRoot":"","sources":["../../../../src/providers/github/commands/prCommands.ts"],"names":[],"mappings":"AAEA,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAEzF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvF;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9F;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEpF;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEhF;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAElF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExF;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEvF;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAOnJ;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,MAAM,CAElF"}

package/dist/providers/github/commands/prCommands.js

@@ -0,0 +1,46 @@
+// gh CLI command strings for PR list/create/merge/review operations — GitHub forge adapter (#792).
+export function findPRByBranchCmd(owner, repo, branchName) {
+    return `gh pr list --repo ${owner}/${repo} --head "${branchName}" --state all --json number,state,headRefName,baseRefName,updatedAt,labels --limit 20`;
+}
+export function fetchPRDetailsCmd(owner, repo, prNumber) {
+    return `gh pr view ${prNumber} --repo ${owner}/${repo} --json number,title,body,state,headRefName,baseRefName,url`;
+}
+export function fetchPRReviewsCmd(owner, repo, prNumber) {
+    return `gh api repos/${owner}/${repo}/pulls/${prNumber}/reviews --paginate`;
+}
+export function fetchPRReviewCommentsCmd(owner, repo, prNumber) {
+    return `gh api repos/${owner}/${repo}/pulls/${prNumber}/comments --paginate`;
+}
+export function commentOnPRCmd(owner, repo, prNumber) {
+    return `gh pr comment ${prNumber} --repo ${owner}/${repo} --body-file -`;
+}
+export function mergePRCmd(owner, repo, prNumber) {
+    return `gh pr merge ${prNumber} --merge --repo ${owner}/${repo}`;
+}
+export function approvePRCmd(owner, repo, prNumber) {
+    return `gh pr review ${prNumber} --approve --repo ${owner}/${repo}`;
+}
+export function prApprovalStateCmd(owner, repo, prNumber) {
+    return `gh pr view ${prNumber} --repo ${owner}/${repo} --json reviewDecision,reviews`;
+}
+export function fetchPRListCmd(owner, repo) {
+    return `gh pr list --repo ${owner}/${repo} --state open --json number,headRefName,updatedAt`;
+}
+export function fetchAllPRsCmd(owner, repo) {
+    return `gh pr list --repo ${owner}/${repo} --state all --json number,body,state,mergedAt --limit 200`;
+}
+export function prChangedFilesCmd(owner, repo, prNumber) {
+    return `gh pr view ${prNumber} --repo ${owner}/${repo} --json files`;
+}
+export function createPRCmd(owner, repo, title, headBranch, baseBranch, labels) {
+    const baseArg = baseBranch ? ` --base ${baseBranch}` : '';
+    const labelArgs = (labels ?? []).map(l => ` --label '${l}'`).join('');
+    // --head must be explicit: gh otherwise infers it from the cwd's current
+    // branch (the context base path, on the default branch), producing an
+    // empty-diff PR against the wrong head.
+    return `gh pr create --repo ${owner}/${repo} --title '${title}' --head "${headBranch}" --body-file -${baseArg}${labelArgs}`;
+}
+export function fetchMergedPRsCmd(owner, repo, limit = 200) {
+    return `gh pr list --repo ${owner}/${repo} --state merged --json body,mergedAt --limit ${limit}`;
+}
+//# sourceMappingURL=prCommands.js.map

package/dist/providers/github/commands/prCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prCommands.js","sourceRoot":"","sources":["../../../../src/providers/github/commands/prCommands.ts"],"names":[],"mappings":"AAAA,mGAAmG;AAEnG,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAAY,EAAE,UAAkB;IAC/E,OAAO,qBAAqB,KAAK,IAAI,IAAI,YAAY,UAAU,uFAAuF,CAAC;AACzJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAAY,EAAE,QAAgB;IAC7E,OAAO,cAAc,QAAQ,WAAW,KAAK,IAAI,IAAI,6DAA6D,CAAC;AACrH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAAY,EAAE,QAAgB;IAC7E,OAAO,gBAAgB,KAAK,IAAI,IAAI,UAAU,QAAQ,qBAAqB,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,IAAY,EAAE,QAAgB;IACpF,OAAO,gBAAgB,KAAK,IAAI,IAAI,UAAU,QAAQ,sBAAsB,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,IAAY,EAAE,QAAgB;IAC1E,OAAO,iBAAiB,QAAQ,WAAW,KAAK,IAAI,IAAI,gBAAgB,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,IAAY,EAAE,QAAgB;IACtE,OAAO,eAAe,QAAQ,mBAAmB,KAAK,IAAI,IAAI,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,IAAY,EAAE,QAAgB;IACxE,OAAO,gBAAgB,QAAQ,qBAAqB,KAAK,IAAI,IAAI,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,IAAY,EAAE,QAAgB;IAC9E,OAAO,cAAc,QAAQ,WAAW,KAAK,IAAI,IAAI,gCAAgC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,IAAY;IACxD,OAAO,qBAAqB,KAAK,IAAI,IAAI,mDAAmD,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,IAAY;IACxD,OAAO,qBAAqB,KAAK,IAAI,IAAI,4DAA4D,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAAY,EAAE,QAAgB;IAC7E,OAAO,cAAc,QAAQ,WAAW,KAAK,IAAI,IAAI,eAAe,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,IAAY,EAAE,KAAa,EAAE,UAAkB,EAAE,UAAmB,EAAE,MAA0B;IACzI,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtE,yEAAyE;IACzE,sEAAsE;IACtE,wCAAwC;IACxC,OAAO,uBAAuB,KAAK,IAAI,IAAI,aAAa,KAAK,aAAa,UAAU,kBAAkB,OAAO,GAAG,SAAS,EAAE,CAAC;AAC9H,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAAY,EAAE,KAAK,GAAG,GAAG;IACxE,OAAO,qBAAqB,KAAK,IAAI,IAAI,gDAAgD,KAAK,EAAE,CAAC;AACnG,CAAC"}

package/dist/providers/github/commands/secretCommands.d.ts

@@ -0,0 +1,2 @@
+export declare function setSecretCmd(owner: string, repo: string, name: string): string;
+//# sourceMappingURL=secretCommands.d.ts.map

package/dist/providers/github/commands/secretCommands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretCommands.d.ts","sourceRoot":"","sources":["../../../../src/providers/github/commands/secretCommands.ts"],"names":[],"mappings":"AAEA,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9E"}

package/dist/providers/github/commands/secretCommands.js

@@ -0,0 +1,5 @@
+// gh CLI command strings for GitHub Actions secret operations — GitHub forge adapter (#792).
+export function setSecretCmd(owner, repo, name) {
+    return `gh secret set ${name} --repo ${owner}/${repo} --body -`;
+}
+//# sourceMappingURL=secretCommands.js.map

package/dist/providers/github/commands/secretCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretCommands.js","sourceRoot":"","sources":["../../../../src/providers/github/commands/secretCommands.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAE7F,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,IAAY,EAAE,IAAY;IACpE,OAAO,iBAAiB,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC;AAClE,CAAC"}

package/dist/providers/github/contextBinding.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Case-insensitive owner/repo cross-check shared by the three GitHub port
+ * factories — refuses a `GitContext` bound to a different repository than
+ * the caller's declared `RepoIdentifier`. Mirrors `sameRepoIdentity` in
+ * `adws/core/repoIdentityCrossCheck.ts`, which the adapter cannot import.
+ * `platform` is deliberately not compared.
+ */
+import type { GitContext } from '../../git/index.js';
+import type { RepoIdentifier } from '../types.js';
+export declare function assertContextBoundTo(ctx: Pick<GitContext, 'owner' | 'repo'>, repoId: RepoIdentifier, factoryName: string): void;
+//# sourceMappingURL=contextBinding.d.ts.map

package/dist/providers/github/contextBinding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextBinding.d.ts","sourceRoot":"","sources":["../../../src/providers/github/contextBinding.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,CAAC,EACvC,MAAM,EAAE,cAAc,EACtB,WAAW,EAAE,MAAM,GAClB,IAAI,CAQN"}