@red-hat-developer-hub/backstage-plugin-bulk-import-backend 7.2.0 → 7.3.0

package/CHANGELOG.md

@@ -1,5 +1,56 @@
 # @red-hat-developer-hub/backstage-plugin-bulk-import-backend
 
+## 7.3.0
+
+### Minor Changes
+
+- 4eafd59: **BREAKING** Changes the behavior of the bulk-import backend plugin to return only repositories that are yet to be imported by filtering out the already imported ones. Therefore, the frontend will not display already imported repositories with status displayed as "Imported" anymore. The frontend fetches all repositories at once on the first page load and then all the pagination and search is done client-side.
+- a1ae6d2: ## On Behalf of User Access
+
+  This release introduces the ability for the Bulk Import plugin to fetch repository and organization listings **on behalf of the signed-in user**, using their OAuth credentials rather than relying solely on server-side integration credentials (GitHub App, PAT, or GitLab token).
+
+  ### What Changed
+
+  **Backend (`bulk-import-backend`)**
+  - Added a new `GET /api/bulk-import/scm-hosts` endpoint that returns the configured GitHub and GitLab integration host URLs as a `SCMHostList` object, enabling the frontend to discover which hosts to request OAuth tokens for.
+  - The `GET /repositories` and `GET /organizations/{organizationName}/repositories` endpoints now **require** the `x-scm-tokens` request header — a JSON map of SCM host base URL to user OAuth token. Requests that omit this header, or supply an empty or oversized header, are rejected with HTTP 401. This ensures repository listings are always scoped to the signed-in user's access and never fall back to server-wide integration credentials.
+  - The `x-scm-tokens` header is stripped from the request immediately upon receipt, before the permission check and before any audit event is created, so OAuth token values are never persisted in audit logs.
+  - When user tokens are provided for GitHub, the Octokit response cache is intentionally disabled to prevent cross-user ETag cache leakage. Server-side credential paths are not affected.
+  - Introduced a shared `GitApiService` interface and common SCM types (`SCMOrganization`, `SCMRepository`, `SCMFetchError`, etc.) to unify the GitHub and GitLab service implementations under a consistent contract.
+
+  **Frontend (`bulk-import`)**
+  - The plugin now has a **soft dependency** on `@backstage/integration-react`'s `ScmAuthApi`. If the API is registered in the application, the plugin automatically requests OAuth tokens for each configured SCM host and passes them to the backend to enable user-scoped repository listings.
+  - Added `getSCMHosts()` to the `BulkImportAPI` interface with a corresponding `GET /api/bulk-import/scm-hosts` client call, used to discover host URLs before requesting user tokens.
+  - User OAuth tokens are transmitted to the backend via the `X-SCM-Tokens` request header as a JSON-encoded map.
+  - If the SCM OAuth integration is not configured or token collection fails for all hosts, the repository list query is **blocked** on the frontend and the hook surfaces a descriptive error. This prevents the frontend from firing a request that will always be rejected with 401.
+
+  ### Required Configuration
+
+  The GitHub and/or GitLab OAuth provider must be configured in the Backstage application for repository listing to work. Deployments that previously relied on server-side credentials alone for the repository list view must add an SCM OAuth provider to continue using this feature.
+
+  If `ScmAuthApi` is not registered or tokens cannot be obtained for any configured SCM host, users will see an error prompting them to configure the SCM OAuth integration.
+
+- 328508c: Backstage version bump to v1.49.3
+
+### Patch Changes
+
+- b3a0333: Fixed GitLab OAuth flow for on behalf of the signed-in user
+- 518943d: Updated dependency `@openapitools/openapi-generator-cli` to `2.31.1`.
+  Updated dependency `@playwright/test` to `1.59.1`.
+  Updated dependency `@red-hat-developer-hub/backstage-plugin-theme` to `^0.14.0`.
+- 8e0bb08: Updated dependency `@openapitools/openapi-generator-cli` to `2.30.2`.
+  Updated dependency `openapicmd` to `2.9.0`.
+  Updated dependency `@playwright/test` to `1.58.2`.
+- 3f9d1fe: Updated dependency `openapicmd` to `2.9.2`.
+- Updated dependencies [328508c]
+  - @red-hat-developer-hub/backstage-plugin-bulk-import-common@7.3.0
+
+## 7.2.1
+
+### Patch Changes
+
+- @red-hat-developer-hub/backstage-plugin-bulk-import-common@7.2.1
+
 ## 7.2.0
 
 ### Patch Changes

package/README.md

@@ -301,13 +301,15 @@ The Bulk Import Backend plugin emits audit events for various operations. Events
 
 - **`ping`**: tracks `GET` requests to the `/ping` endpoint, which allows to make sure the bulk import backend is up and running.
 
-- **`org-read`**: tracks `GET` requests to the `/organizations` endpoint, which returns the list of organizations accessible from all configured GitHub Integrations.
+- **`scm-hosts-read`**: tracks `GET` requests to the `/scm-hosts-read` endpoint, which returns the list of configured GitHub and GitLab integration host URLs.
+
+- **`org-read`**: tracks `GET` requests to the `/organizations` endpoint, which returns the list of organizations accessible from all configured SCM Integrations (GitHub and GitLab).
 
   Filter on `queryType`.
   - **`all`**: tracks fetching all organizations. (GET `/organizations`)
   - **`by-query`**: tracks fetching organization filtered by the query parameter 'search'. (GET `/organizations`)
 
-- **`repo-read`**: tracks `GET` requests to the endpoint, which returns the list of repositories accessible from all configured GitHub Integrations.
+- **`repo-read`**: tracks `GET` requests to the endpoint, which returns the list of repositories accessible from all configured SCM Integrations (GitHub and GitLab).
 
   Filter on `queryType`.
   - **`all`**: tracks fetching a list of all repositories accessible by Backstage Github Integrations. (GET `/repositories`)
@@ -343,8 +345,43 @@ Example:
 
 The bulk import backend plugin provides a REST API to bulk import catalog entities into the catalog. The API is available at the `/api/bulk-import` endpoint.
 
-As a prerequisite, you need to add at least one GitHub Integration (using either a GitHub token or a GitHub App or both) in your app-config YAML file (or a local `app-config.local.yaml` file).
-See https://backstage.io/docs/integrations/github/locations/#configuration and https://backstage.io/docs/integrations/github/github-apps/#including-in-integrations-config for more details.
+As a prerequisite, you need to add at least one SCM integration in your app-config YAML file (or a local `app-config.local.yaml` file):
+
+- **GitHub**: Configure a GitHub integration using a GitHub token or a GitHub App (or both). See the [GitHub Locations](https://backstage.io/docs/integrations/github/locations/#configuration) and [GitHub Apps](https://backstage.io/docs/integrations/github/github-apps/#including-in-integrations-config) documentation for details.
+- **GitLab** _(optional)_: Configure a GitLab integration if you want to import from GitLab repositories. See the [GitLab Locations](https://backstage.io/docs/integrations/gitlab/locations/) documentation for details.
+
+### On Behalf of User Access
+
+The plugin supports fetching repository and organization listings **on behalf of the signed-in user**, using their OAuth credentials rather than the server-wide integration credentials (GitHub App, PAT, or GitLab token).
+
+#### How It Works
+
+1. The frontend calls `GET /api/bulk-import/scm-hosts` to retrieve the list of configured SCM integration host URLs, grouped by provider (`github` and `gitlab`).
+2. For each host, the frontend requests an OAuth token from the Backstage `ScmAuthApi` (provided by `@backstage/integration-react`).
+3. The collected tokens are sent to the backend via the **required** `x-scm-tokens` request header — a JSON-encoded string whose value, when parsed, maps each integration base URL to the user's OAuth token (e.g. `{"https://github.com":"ghp_xxx"}`).
+4. The backend uses these user tokens to call the GitHub or GitLab APIs on behalf of the user, so the repository listings reflect what the signed-in user can personally access.
+
+#### Required OAuth Configuration
+
+The `x-scm-tokens` header is **required** for `GET /repositories` and `GET /organizations/{organizationName}/repositories`. Requests that omit the header, supply an empty token map, or send a header that exceeds the allowed size are rejected with **HTTP 401**.
+
+A GitHub and/or GitLab OAuth provider must therefore be configured in the Backstage application for these endpoints to work. Refer to the [Backstage GitHub auth docs](https://backstage.io/docs/auth/github/provider) and [GitLab auth docs](https://backstage.io/docs/auth/gitlab/provider) for setup instructions.
+
+> **Migration note:** Deployments that previously relied solely on server-side credentials (GitHub App, PAT, or GitLab token) for the repository list view must now also configure an SCM OAuth provider. The server-side credentials are still used for all other operations (import creation, status checks, etc.) and are unaffected by this change.
+
+#### Security Note
+
+When user tokens are provided for GitHub, the Octokit response cache is intentionally disabled to prevent cross-user ETag cache leakage. Server-side credential paths are not affected.
+
+The `x-scm-tokens` header is stripped from the request immediately upon receipt — before the permission check and before any audit event is created — so OAuth token values are never persisted in audit logs.
+
+#### New API Endpoint
+
+| Method | Path                         | Description                                                                                 |
+| ------ | ---------------------------- | ------------------------------------------------------------------------------------------- |
+| `GET`  | `/api/bulk-import/scm-hosts` | Returns configured GitHub and GitLab integration host base URLs as an `SCMHostList` object. |
+
+The existing `GET /repositories` and `GET /organizations/{organizationName}/repositories` endpoints now **require** the `x-scm-tokens` header. See the [API documentation](api-docs/README.md) for the full request/response specification.
 
 ## REST API
 

package/dist/database/repositoryDao.cjs.js

@@ -30,6 +30,9 @@ class RepositoryDao {
     this.logger = logger;
     this.tableName = tableName;
   }
+  knex;
+  logger;
+  tableName;
   async findRepositories(page = 1, size = 10, search) {
     this.logger.debug(
       `Fetching repositories page=${page}, size=${size}, search=${search}`
@@ -68,6 +71,7 @@ class ScaffolderTaskDao {
   constructor(knex) {
     this.knex = knex;
   }
+  knex;
   async findAllTasks() {
     return await this.knex("scaffolder_tasks").select(
       "taskId",
@@ -95,6 +99,7 @@ class TaskLocationsDao {
   constructor(knex) {
     this.knex = knex;
   }
+  knex;
   async addTaskLocation(taskId, location, type = "component") {
     await this.knex("task_locations").insert({ taskId, location, type });
   }
@@ -114,6 +119,7 @@ class OrchestratorWorkflowDao {
   constructor(knex) {
     this.knex = knex;
   }
+  knex;
   async insertWorkflow(instanceId, repositoryId) {
     const [newWorkflow] = await this.knex("orchestrator_workflows").insert({
       instance_id: instanceId,

package/dist/database/repositoryDao.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"repositoryDao.cjs.js","sources":["../../src/database/repositoryDao.ts"],"sourcesContent":["/*\n * Copyright Red Hat, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { LoggerService } from '@backstage/backend-plugin-api';\n\nimport { Knex } from 'knex';\n\nimport { Components } from '../generated/openapi';\n\nexport interface Repository {\n  id: number;\n  url: string;\n  approvalTool: Components.Schemas.ApprovalTool;\n}\n\nexport interface ScaffolderTask {\n  taskId: string;\n  scaffolderOptions: any;\n  repositoryId: number;\n  executedAt?: Date;\n}\n\nexport interface PaginatedResult<T> {\n  data: T[];\n  page: number;\n  size: number;\n  total: number;\n  totalPages: number;\n}\n\nexport async function paginateQuery<T>(\n  queryBuilder: Knex.QueryBuilder<any, T[]>,\n  page: number = 1,\n  size: number = 10,\n  search?: { column: string; term?: string },\n): Promise<PaginatedResult<T>> {\n  const offset = (page - 1) * size;\n\n  let baseQuery = queryBuilder.clone();\n\n  if (search?.term) {\n    if (queryBuilder.client.dialect === 'postgres') {\n      baseQuery = baseQuery.whereILike(search.column, `%${search.term}%`);\n    } else {\n      baseQuery = baseQuery.whereLike(search.column, `%${search.term}%`);\n    }\n  }\n\n  const countQuery = baseQuery\n    .clone()\n    .clearSelect()\n    .clearOrder()\n    .count<{ count: string }[]>('* as count');\n\n  const [rows, [{ count }]] = await Promise.all([\n    baseQuery.clone().limit(size).offset(offset),\n    countQuery,\n  ]);\n\n  const total = Number(count);\n\n  return {\n    data: rows as T[],\n    page,\n    size,\n    total,\n    totalPages: Math.ceil(total / size),\n  };\n}\n\nexport type RepositoryName = 'repositories' | 'orchestrator_repositories';\n\n// @internal\nexport class RepositoryDao<R extends RepositoryName> {\n  constructor(\n    private readonly knex: Knex<any, any[]>,\n    private readonly logger: LoggerService,\n    private readonly tableName: R,\n  ) {}\n\n  async findRepositories(\n    page: number = 1,\n    size: number = 10,\n    search?: string,\n  ): Promise<PaginatedResult<Repository>> {\n    this.logger.debug(\n      `Fetching repositories page=${page}, size=${size}, search=${search}`,\n    );\n    const query = this.knex(this.tableName).select('id', 'url', 'approvalTool');\n    const searchParam = { column: 'url', term: search };\n    return paginateQuery<Repository>(query, page, size, searchParam);\n  }\n\n  async insertRepository(\n    repoUrl: string,\n    taskOrWorkflowId: string,\n    approvalTool: string,\n  ): Promise<number> {\n    this.logger.debug(\n      `Saving repository ${repoUrl} for task/workflow ${taskOrWorkflowId} to database..`,\n    );\n    const repository = await this.knex(this.tableName)\n      .where({ url: repoUrl })\n      .first();\n\n    let repositoryId;\n    if (repository) {\n      repositoryId = repository.id;\n    } else {\n      const [newRepository] = await this.knex(this.tableName)\n        .insert({ url: repoUrl, approvalTool: approvalTool })\n        .returning('id');\n      repositoryId = newRepository.id;\n    }\n    return repositoryId;\n  }\n\n  async findRepositoryByUrl(url: string): Promise<Repository | undefined> {\n    this.logger.debug(`Fetching repository from database by url ${url}...`);\n    return await this.knex(this.tableName).where({ url: url }).first();\n  }\n\n  async deleteRepository(url: string): Promise<void> {\n    this.logger.debug(`Deleting repository from database by url ${url}...`);\n    const repository = await this.knex(this.tableName)\n      .where({ url: url })\n      .first();\n\n    if (repository) {\n      await this.knex(this.tableName).where({ id: repository.id }).del();\n    }\n  }\n}\n\n// @internal\nexport class ScaffolderTaskDao {\n  constructor(private readonly knex: Knex<any, any[]>) {}\n\n  async findAllTasks(): Promise<ScaffolderTask[]> {\n    return await this.knex('scaffolder_tasks').select<ScaffolderTask[]>(\n      'taskId',\n      'repositoryId',\n      'scaffolderOptions',\n    );\n  }\n\n  async insertTask(task: ScaffolderTask): Promise<string> {\n    const result = await this.knex('scaffolder_tasks')\n      .insert<ScaffolderTask>({\n        taskId: task.taskId,\n        repositoryId: task.repositoryId,\n        scaffolderOptions: JSON.stringify(task.scaffolderOptions),\n        executedAt: task.executedAt,\n      })\n      .returning<{ taskId: string }[]>('taskId');\n\n    return result[0].taskId;\n  }\n\n  async findTasksByRepositoryId(\n    repositoryId: number,\n  ): Promise<ScaffolderTask[]> {\n    return await this.knex('scaffolder_tasks')\n      .where({ repositoryId })\n      .select<\n        ScaffolderTask[]\n      >('taskId', 'repositoryId', 'scaffolderOptions', 'executedAt');\n  }\n\n  async lastExecutedTaskByRepoId(\n    repositoryId: number,\n  ): Promise<ScaffolderTask | undefined> {\n    return await this.knex('scaffolder_tasks')\n      .where({ repositoryId })\n      .orderBy('executedAt', 'desc')\n      .first<ScaffolderTask>();\n  }\n}\n\nexport interface TaskLocation {\n  id: number;\n  taskId: string;\n  location: string;\n  type: string;\n}\n\n// @internal\nexport class TaskLocationsDao {\n  constructor(private readonly knex: Knex<any, any[]>) {}\n\n  async addTaskLocation(\n    taskId: string,\n    location: string,\n    type: string = 'component',\n  ): Promise<void> {\n    await this.knex('task_locations').insert({ taskId, location, type });\n  }\n\n  async findLocationsByTaskId(taskId: string): Promise<TaskLocation[]> {\n    return await this.knex('task_locations')\n      .where({ taskId })\n      .select<TaskLocation[]>('id', 'taskId', 'location', 'type');\n  }\n\n  async findAllLocations(): Promise<TaskLocation[]> {\n    return await this.knex('task_locations').select<TaskLocation[]>(\n      'id',\n      'taskId',\n      'location',\n      'type',\n    );\n  }\n}\n\nexport interface OrchestratorWorkflow {\n  id: number;\n  instanceId: string;\n  repositoryId: number;\n  createdAt: Date;\n  status?: string;\n}\n\n// @internal\nexport class OrchestratorWorkflowDao {\n  constructor(private readonly knex: Knex<any, any[]>) {}\n\n  async insertWorkflow(\n    instanceId: string,\n    repositoryId: number,\n  ): Promise<number> {\n    const [newWorkflow] = await this.knex('orchestrator_workflows')\n      .insert({\n        instance_id: instanceId,\n        repositoryId: repositoryId,\n      })\n      .returning('id');\n    return newWorkflow.id;\n  }\n\n  async lastExecutedWorkflowByRepoId(\n    repositoryId: number,\n  ): Promise<OrchestratorWorkflow | undefined> {\n    const result = await this.knex('orchestrator_workflows')\n      .select({\n        id: 'id',\n        instanceId: 'instance_id',\n        repositoryId: 'repositoryId',\n        createdAt: 'created_at',\n      })\n      .where({ repositoryId: repositoryId })\n      .orderBy('created_at', 'desc')\n      .first();\n    return result;\n  }\n\n  async findWorkflowsByRepositoryId(\n    repositoryId: number,\n  ): Promise<OrchestratorWorkflow[]> {\n    return await this.knex('orchestrator_workflows')\n      .where({ repositoryId: repositoryId })\n      .select({\n        id: 'id',\n        instanceId: 'instance_id',\n        repositoryId: 'repositoryId',\n        createdAt: 'created_at',\n      });\n  }\n}\n"],"names":[],"mappings":";;AA2CA,eAAsB,cACpB,YAAA,EACA,IAAA,GAAe,CAAA,EACf,IAAA,GAAe,IACf,MAAA,EAC6B;AAC7B,EAAA,MAAM,MAAA,GAAA,CAAU,OAAO,CAAA,IAAK,IAAA;AAE5B,EAAA,IAAI,SAAA,GAAY,aAAa,KAAA,EAAM;AAEnC,EAAA,IAAI,QAAQ,IAAA,EAAM;AAChB,IAAA,IAAI,YAAA,CAAa,MAAA,CAAO,OAAA,KAAY,UAAA,EAAY;AAC9C,MAAA,SAAA,GAAY,UAAU,UAAA,CAAW,MAAA,CAAO,QAAQ,CAAA,CAAA,EAAI,MAAA,CAAO,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,IACpE,CAAA,MAAO;AACL,MAAA,SAAA,GAAY,UAAU,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA,CAAA,EAAI,MAAA,CAAO,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,IACnE;AAAA,EACF;AAEA,EAAA,MAAM,UAAA,GAAa,UAChB,KAAA,EAAM,CACN,aAAY,CACZ,UAAA,EAAW,CACX,KAAA,CAA2B,YAAY,CAAA;AAE1C,EAAA,MAAM,CAAC,IAAA,EAAM,CAAC,EAAE,KAAA,EAAO,CAAC,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI;AAAA,IAC5C,UAAU,KAAA,EAAM,CAAE,MAAM,IAAI,CAAA,CAAE,OAAO,MAAM,CAAA;AAAA,IAC3C;AAAA,GACD,CAAA;AAED,EAAA,MAAM,KAAA,GAAQ,OAAO,KAAK,CAAA;AAE1B,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA;AAAA,IACN,IAAA;AAAA,IACA,IAAA;AAAA,IACA,KAAA;AAAA,IACA,UAAA,EAAY,IAAA,CAAK,IAAA,CAAK,KAAA,GAAQ,IAAI;AAAA,GACpC;AACF;AAKO,MAAM,aAAA,CAAwC;AAAA,EACnD,WAAA,CACmB,IAAA,EACA,MAAA,EACA,SAAA,EACjB;AAHiB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAAA,EAChB;AAAA,EAEH,MAAM,gBAAA,CACJ,IAAA,GAAe,CAAA,EACf,IAAA,GAAe,IACf,MAAA,EACsC;AACtC,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,MACV,CAAA,2BAAA,EAA8B,IAAI,CAAA,OAAA,EAAU,IAAI,YAAY,MAAM,CAAA;AAAA,KACpE;AACA,IAAA,MAAM,KAAA,GAAQ,KAAK,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,CAAE,MAAA,CAAO,IAAA,EAAM,KAAA,EAAO,cAAc,CAAA;AAC1E,IAAA,MAAM,WAAA,GAAc,EAAE,MAAA,EAAQ,KAAA,EAAO,MAAM,MAAA,EAAO;AAClD,IAAA,OAAO,aAAA,CAA0B,KAAA,EAAO,IAAA,EAAM,IAAA,EAAM,WAAW,CAAA;AAAA,EACjE;AAAA,EAEA,MAAM,gBAAA,CACJ,OAAA,EACA,gBAAA,EACA,YAAA,EACiB;AACjB,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,MACV,CAAA,kBAAA,EAAqB,OAAO,CAAA,mBAAA,EAAsB,gBAAgB,CAAA,cAAA;AAAA,KACpE;AACA,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,CAC9C,KAAA,CAAM,EAAE,GAAA,EAAK,OAAA,EAAS,EACtB,KAAA,EAAM;AAET,IAAA,IAAI,YAAA;AACJ,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,YAAA,GAAe,UAAA,CAAW,EAAA;AAAA,IAC5B,CAAA,MAAO;AACL,MAAA,MAAM,CAAC,aAAa,CAAA,GAAI,MAAM,IAAA,CAAK,KAAK,IAAA,CAAK,SAAS,CAAA,CACnD,MAAA,CAAO,EAAE,GAAA,EAAK,OAAA,EAAS,cAA4B,CAAA,CACnD,UAAU,IAAI,CAAA;AACjB,MAAA,YAAA,GAAe,aAAA,CAAc,EAAA;AAAA,IAC/B;AACA,IAAA,OAAO,YAAA;AAAA,EACT;AAAA,EAEA,MAAM,oBAAoB,GAAA,EAA8C;AACtE,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,CAAA,yCAAA,EAA4C,GAAG,CAAA,GAAA,CAAK,CAAA;AACtE,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,CAAE,KAAA,CAAM,EAAE,GAAA,EAAU,CAAA,CAAE,KAAA,EAAM;AAAA,EACnE;AAAA,EAEA,MAAM,iBAAiB,GAAA,EAA4B;AACjD,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,CAAA,yCAAA,EAA4C,GAAG,CAAA,GAAA,CAAK,CAAA;AACtE,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,CAC9C,KAAA,CAAM,EAAE,GAAA,EAAU,CAAA,CAClB,KAAA,EAAM;AAET,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,MAAM,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,CAAE,KAAA,CAAM,EAAE,EAAA,EAAI,UAAA,CAAW,EAAA,EAAI,CAAA,CAAE,GAAA,EAAI;AAAA,IACnE;AAAA,EACF;AACF;AAGO,MAAM,iBAAA,CAAkB;AAAA,EAC7B,YAA6B,IAAA,EAAwB;AAAxB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAyB;AAAA,EAEtD,MAAM,YAAA,GAA0C;AAC9C,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,kBAAkB,CAAA,CAAE,MAAA;AAAA,MACzC,QAAA;AAAA,MACA,cAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,IAAA,EAAuC;AACtD,IAAA,MAAM,SAAS,MAAM,IAAA,CAAK,IAAA,CAAK,kBAAkB,EAC9C,MAAA,CAAuB;AAAA,MACtB,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,cAAc,IAAA,CAAK,YAAA;AAAA,MACnB,iBAAA,EAAmB,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,iBAAiB,CAAA;AAAA,MACxD,YAAY,IAAA,CAAK;AAAA,KAClB,CAAA,CACA,SAAA,CAAgC,QAAQ,CAAA;AAE3C,IAAA,OAAO,MAAA,CAAO,CAAC,CAAA,CAAE,MAAA;AAAA,EACnB;AAAA,EAEA,MAAM,wBACJ,YAAA,EAC2B;AAC3B,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,kBAAkB,EACtC,KAAA,CAAM,EAAE,YAAA,EAAc,CAAA,CACtB,MAAA,CAEC,QAAA,EAAU,cAAA,EAAgB,qBAAqB,YAAY,CAAA;AAAA,EACjE;AAAA,EAEA,MAAM,yBACJ,YAAA,EACqC;AACrC,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,kBAAkB,EACtC,KAAA,CAAM,EAAE,YAAA,EAAc,CAAA,CACtB,OAAA,CAAQ,YAAA,EAAc,MAAM,EAC5B,KAAA,EAAsB;AAAA,EAC3B;AACF;AAUO,MAAM,gBAAA,CAAiB;AAAA,EAC5B,YAA6B,IAAA,EAAwB;AAAxB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAyB;AAAA,EAEtD,MAAM,eAAA,CACJ,MAAA,EACA,QAAA,EACA,OAAe,WAAA,EACA;AACf,IAAA,MAAM,IAAA,CAAK,KAAK,gBAAgB,CAAA,CAAE,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,IAAA,EAAM,CAAA;AAAA,EACrE;AAAA,EAEA,MAAM,sBAAsB,MAAA,EAAyC;AACnE,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,gBAAgB,EACpC,KAAA,CAAM,EAAE,MAAA,EAAQ,CAAA,CAChB,MAAA,CAAuB,IAAA,EAAM,QAAA,EAAU,YAAY,MAAM,CAAA;AAAA,EAC9D;AAAA,EAEA,MAAM,gBAAA,GAA4C;AAChD,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,gBAAgB,CAAA,CAAE,MAAA;AAAA,MACvC,IAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF;AAWO,MAAM,uBAAA,CAAwB;AAAA,EACnC,YAA6B,IAAA,EAAwB;AAAxB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAyB;AAAA,EAEtD,MAAM,cAAA,CACJ,UAAA,EACA,YAAA,EACiB;AACjB,IAAA,MAAM,CAAC,WAAW,CAAA,GAAI,MAAM,KAAK,IAAA,CAAK,wBAAwB,EAC3D,MAAA,CAAO;AAAA,MACN,WAAA,EAAa,UAAA;AAAA,MACb;AAAA,KACD,CAAA,CACA,SAAA,CAAU,IAAI,CAAA;AACjB,IAAA,OAAO,WAAA,CAAY,EAAA;AAAA,EACrB;AAAA,EAEA,MAAM,6BACJ,YAAA,EAC2C;AAC3C,IAAA,MAAM,SAAS,MAAM,IAAA,CAAK,IAAA,CAAK,wBAAwB,EACpD,MAAA,CAAO;AAAA,MACN,EAAA,EAAI,IAAA;AAAA,MACJ,UAAA,EAAY,aAAA;AAAA,MACZ,YAAA,EAAc,cAAA;AAAA,MACd,SAAA,EAAW;AAAA,KACZ,CAAA,CACA,KAAA,CAAM,EAAE,YAAA,EAA4B,CAAA,CACpC,OAAA,CAAQ,YAAA,EAAc,MAAM,CAAA,CAC5B,KAAA,EAAM;AACT,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,MAAM,4BACJ,YAAA,EACiC;AACjC,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,wBAAwB,CAAA,CAC5C,MAAM,EAAE,YAAA,EAA4B,CAAA,CACpC,MAAA,CAAO;AAAA,MACN,EAAA,EAAI,IAAA;AAAA,MACJ,UAAA,EAAY,aAAA;AAAA,MACZ,YAAA,EAAc,cAAA;AAAA,MACd,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACL;AACF;;;;;;;;"}
+{"version":3,"file":"repositoryDao.cjs.js","sources":["../../src/database/repositoryDao.ts"],"sourcesContent":["/*\n * Copyright Red Hat, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { LoggerService } from '@backstage/backend-plugin-api';\n\nimport { Knex } from 'knex';\n\nimport { Components } from '../generated/openapi';\n\nexport interface Repository {\n  id: number;\n  url: string;\n  approvalTool: Components.Schemas.ApprovalTool;\n}\n\nexport interface ScaffolderTask {\n  taskId: string;\n  scaffolderOptions: any;\n  repositoryId: number;\n  executedAt?: Date;\n}\n\nexport interface PaginatedResult<T> {\n  data: T[];\n  page: number;\n  size: number;\n  total: number;\n  totalPages: number;\n}\n\nexport async function paginateQuery<T>(\n  queryBuilder: Knex.QueryBuilder<any, T[]>,\n  page: number = 1,\n  size: number = 10,\n  search?: { column: string; term?: string },\n): Promise<PaginatedResult<T>> {\n  const offset = (page - 1) * size;\n\n  let baseQuery = queryBuilder.clone();\n\n  if (search?.term) {\n    if (queryBuilder.client.dialect === 'postgres') {\n      baseQuery = baseQuery.whereILike(search.column, `%${search.term}%`);\n    } else {\n      baseQuery = baseQuery.whereLike(search.column, `%${search.term}%`);\n    }\n  }\n\n  const countQuery = baseQuery\n    .clone()\n    .clearSelect()\n    .clearOrder()\n    .count<{ count: string }[]>('* as count');\n\n  const [rows, [{ count }]] = await Promise.all([\n    baseQuery.clone().limit(size).offset(offset),\n    countQuery,\n  ]);\n\n  const total = Number(count);\n\n  return {\n    data: rows as T[],\n    page,\n    size,\n    total,\n    totalPages: Math.ceil(total / size),\n  };\n}\n\nexport type RepositoryName = 'repositories' | 'orchestrator_repositories';\n\n// @internal\nexport class RepositoryDao<R extends RepositoryName> {\n  constructor(\n    private readonly knex: Knex<any, any[]>,\n    private readonly logger: LoggerService,\n    private readonly tableName: R,\n  ) {}\n\n  async findRepositories(\n    page: number = 1,\n    size: number = 10,\n    search?: string,\n  ): Promise<PaginatedResult<Repository>> {\n    this.logger.debug(\n      `Fetching repositories page=${page}, size=${size}, search=${search}`,\n    );\n    const query = this.knex(this.tableName).select('id', 'url', 'approvalTool');\n    const searchParam = { column: 'url', term: search };\n    return paginateQuery<Repository>(query, page, size, searchParam);\n  }\n\n  async insertRepository(\n    repoUrl: string,\n    taskOrWorkflowId: string,\n    approvalTool: string,\n  ): Promise<number> {\n    this.logger.debug(\n      `Saving repository ${repoUrl} for task/workflow ${taskOrWorkflowId} to database..`,\n    );\n    const repository = await this.knex(this.tableName)\n      .where({ url: repoUrl })\n      .first();\n\n    let repositoryId;\n    if (repository) {\n      repositoryId = repository.id;\n    } else {\n      const [newRepository] = await this.knex(this.tableName)\n        .insert({ url: repoUrl, approvalTool: approvalTool })\n        .returning('id');\n      repositoryId = newRepository.id;\n    }\n    return repositoryId;\n  }\n\n  async findRepositoryByUrl(url: string): Promise<Repository | undefined> {\n    this.logger.debug(`Fetching repository from database by url ${url}...`);\n    return await this.knex(this.tableName).where({ url: url }).first();\n  }\n\n  async deleteRepository(url: string): Promise<void> {\n    this.logger.debug(`Deleting repository from database by url ${url}...`);\n    const repository = await this.knex(this.tableName)\n      .where({ url: url })\n      .first();\n\n    if (repository) {\n      await this.knex(this.tableName).where({ id: repository.id }).del();\n    }\n  }\n}\n\n// @internal\nexport class ScaffolderTaskDao {\n  constructor(private readonly knex: Knex<any, any[]>) {}\n\n  async findAllTasks(): Promise<ScaffolderTask[]> {\n    return await this.knex('scaffolder_tasks').select<ScaffolderTask[]>(\n      'taskId',\n      'repositoryId',\n      'scaffolderOptions',\n    );\n  }\n\n  async insertTask(task: ScaffolderTask): Promise<string> {\n    const result = await this.knex('scaffolder_tasks')\n      .insert<ScaffolderTask>({\n        taskId: task.taskId,\n        repositoryId: task.repositoryId,\n        scaffolderOptions: JSON.stringify(task.scaffolderOptions),\n        executedAt: task.executedAt,\n      })\n      .returning<{ taskId: string }[]>('taskId');\n\n    return result[0].taskId;\n  }\n\n  async findTasksByRepositoryId(\n    repositoryId: number,\n  ): Promise<ScaffolderTask[]> {\n    return await this.knex('scaffolder_tasks')\n      .where({ repositoryId })\n      .select<\n        ScaffolderTask[]\n      >('taskId', 'repositoryId', 'scaffolderOptions', 'executedAt');\n  }\n\n  async lastExecutedTaskByRepoId(\n    repositoryId: number,\n  ): Promise<ScaffolderTask | undefined> {\n    return await this.knex('scaffolder_tasks')\n      .where({ repositoryId })\n      .orderBy('executedAt', 'desc')\n      .first<ScaffolderTask>();\n  }\n}\n\nexport interface TaskLocation {\n  id: number;\n  taskId: string;\n  location: string;\n  type: string;\n}\n\n// @internal\nexport class TaskLocationsDao {\n  constructor(private readonly knex: Knex<any, any[]>) {}\n\n  async addTaskLocation(\n    taskId: string,\n    location: string,\n    type: string = 'component',\n  ): Promise<void> {\n    await this.knex('task_locations').insert({ taskId, location, type });\n  }\n\n  async findLocationsByTaskId(taskId: string): Promise<TaskLocation[]> {\n    return await this.knex('task_locations')\n      .where({ taskId })\n      .select<TaskLocation[]>('id', 'taskId', 'location', 'type');\n  }\n\n  async findAllLocations(): Promise<TaskLocation[]> {\n    return await this.knex('task_locations').select<TaskLocation[]>(\n      'id',\n      'taskId',\n      'location',\n      'type',\n    );\n  }\n}\n\nexport interface OrchestratorWorkflow {\n  id: number;\n  instanceId: string;\n  repositoryId: number;\n  createdAt: Date;\n  status?: string;\n}\n\n// @internal\nexport class OrchestratorWorkflowDao {\n  constructor(private readonly knex: Knex<any, any[]>) {}\n\n  async insertWorkflow(\n    instanceId: string,\n    repositoryId: number,\n  ): Promise<number> {\n    const [newWorkflow] = await this.knex('orchestrator_workflows')\n      .insert({\n        instance_id: instanceId,\n        repositoryId: repositoryId,\n      })\n      .returning('id');\n    return newWorkflow.id;\n  }\n\n  async lastExecutedWorkflowByRepoId(\n    repositoryId: number,\n  ): Promise<OrchestratorWorkflow | undefined> {\n    const result = await this.knex('orchestrator_workflows')\n      .select({\n        id: 'id',\n        instanceId: 'instance_id',\n        repositoryId: 'repositoryId',\n        createdAt: 'created_at',\n      })\n      .where({ repositoryId: repositoryId })\n      .orderBy('created_at', 'desc')\n      .first();\n    return result;\n  }\n\n  async findWorkflowsByRepositoryId(\n    repositoryId: number,\n  ): Promise<OrchestratorWorkflow[]> {\n    return await this.knex('orchestrator_workflows')\n      .where({ repositoryId: repositoryId })\n      .select({\n        id: 'id',\n        instanceId: 'instance_id',\n        repositoryId: 'repositoryId',\n        createdAt: 'created_at',\n      });\n  }\n}\n"],"names":[],"mappings":";;AA2CA,eAAsB,cACpB,YAAA,EACA,IAAA,GAAe,CAAA,EACf,IAAA,GAAe,IACf,MAAA,EAC6B;AAC7B,EAAA,MAAM,MAAA,GAAA,CAAU,OAAO,CAAA,IAAK,IAAA;AAE5B,EAAA,IAAI,SAAA,GAAY,aAAa,KAAA,EAAM;AAEnC,EAAA,IAAI,QAAQ,IAAA,EAAM;AAChB,IAAA,IAAI,YAAA,CAAa,MAAA,CAAO,OAAA,KAAY,UAAA,EAAY;AAC9C,MAAA,SAAA,GAAY,UAAU,UAAA,CAAW,MAAA,CAAO,QAAQ,CAAA,CAAA,EAAI,MAAA,CAAO,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,IACpE,CAAA,MAAO;AACL,MAAA,SAAA,GAAY,UAAU,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA,CAAA,EAAI,MAAA,CAAO,IAAI,CAAA,CAAA,CAAG,CAAA;AAAA,IACnE;AAAA,EACF;AAEA,EAAA,MAAM,UAAA,GAAa,UAChB,KAAA,EAAM,CACN,aAAY,CACZ,UAAA,EAAW,CACX,KAAA,CAA2B,YAAY,CAAA;AAE1C,EAAA,MAAM,CAAC,IAAA,EAAM,CAAC,EAAE,KAAA,EAAO,CAAC,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI;AAAA,IAC5C,UAAU,KAAA,EAAM,CAAE,MAAM,IAAI,CAAA,CAAE,OAAO,MAAM,CAAA;AAAA,IAC3C;AAAA,GACD,CAAA;AAED,EAAA,MAAM,KAAA,GAAQ,OAAO,KAAK,CAAA;AAE1B,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAA;AAAA,IACN,IAAA;AAAA,IACA,IAAA;AAAA,IACA,KAAA;AAAA,IACA,UAAA,EAAY,IAAA,CAAK,IAAA,CAAK,KAAA,GAAQ,IAAI;AAAA,GACpC;AACF;AAKO,MAAM,aAAA,CAAwC;AAAA,EACnD,WAAA,CACmB,IAAA,EACA,MAAA,EACA,SAAA,EACjB;AAHiB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AACA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAAA,EAChB;AAAA,EAHgB,IAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EAGnB,MAAM,gBAAA,CACJ,IAAA,GAAe,CAAA,EACf,IAAA,GAAe,IACf,MAAA,EACsC;AACtC,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,MACV,CAAA,2BAAA,EAA8B,IAAI,CAAA,OAAA,EAAU,IAAI,YAAY,MAAM,CAAA;AAAA,KACpE;AACA,IAAA,MAAM,KAAA,GAAQ,KAAK,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,CAAE,MAAA,CAAO,IAAA,EAAM,KAAA,EAAO,cAAc,CAAA;AAC1E,IAAA,MAAM,WAAA,GAAc,EAAE,MAAA,EAAQ,KAAA,EAAO,MAAM,MAAA,EAAO;AAClD,IAAA,OAAO,aAAA,CAA0B,KAAA,EAAO,IAAA,EAAM,IAAA,EAAM,WAAW,CAAA;AAAA,EACjE;AAAA,EAEA,MAAM,gBAAA,CACJ,OAAA,EACA,gBAAA,EACA,YAAA,EACiB;AACjB,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA;AAAA,MACV,CAAA,kBAAA,EAAqB,OAAO,CAAA,mBAAA,EAAsB,gBAAgB,CAAA,cAAA;AAAA,KACpE;AACA,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,CAC9C,KAAA,CAAM,EAAE,GAAA,EAAK,OAAA,EAAS,EACtB,KAAA,EAAM;AAET,IAAA,IAAI,YAAA;AACJ,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,YAAA,GAAe,UAAA,CAAW,EAAA;AAAA,IAC5B,CAAA,MAAO;AACL,MAAA,MAAM,CAAC,aAAa,CAAA,GAAI,MAAM,IAAA,CAAK,KAAK,IAAA,CAAK,SAAS,CAAA,CACnD,MAAA,CAAO,EAAE,GAAA,EAAK,OAAA,EAAS,cAA4B,CAAA,CACnD,UAAU,IAAI,CAAA;AACjB,MAAA,YAAA,GAAe,aAAA,CAAc,EAAA;AAAA,IAC/B;AACA,IAAA,OAAO,YAAA;AAAA,EACT;AAAA,EAEA,MAAM,oBAAoB,GAAA,EAA8C;AACtE,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,CAAA,yCAAA,EAA4C,GAAG,CAAA,GAAA,CAAK,CAAA;AACtE,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,CAAE,KAAA,CAAM,EAAE,GAAA,EAAU,CAAA,CAAE,KAAA,EAAM;AAAA,EACnE;AAAA,EAEA,MAAM,iBAAiB,GAAA,EAA4B;AACjD,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,CAAA,yCAAA,EAA4C,GAAG,CAAA,GAAA,CAAK,CAAA;AACtE,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,CAC9C,KAAA,CAAM,EAAE,GAAA,EAAU,CAAA,CAClB,KAAA,EAAM;AAET,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,MAAM,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,CAAE,KAAA,CAAM,EAAE,EAAA,EAAI,UAAA,CAAW,EAAA,EAAI,CAAA,CAAE,GAAA,EAAI;AAAA,IACnE;AAAA,EACF;AACF;AAGO,MAAM,iBAAA,CAAkB;AAAA,EAC7B,YAA6B,IAAA,EAAwB;AAAxB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAyB;AAAA,EAAzB,IAAA;AAAA,EAE7B,MAAM,YAAA,GAA0C;AAC9C,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,kBAAkB,CAAA,CAAE,MAAA;AAAA,MACzC,QAAA;AAAA,MACA,cAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,IAAA,EAAuC;AACtD,IAAA,MAAM,SAAS,MAAM,IAAA,CAAK,IAAA,CAAK,kBAAkB,EAC9C,MAAA,CAAuB;AAAA,MACtB,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,cAAc,IAAA,CAAK,YAAA;AAAA,MACnB,iBAAA,EAAmB,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,iBAAiB,CAAA;AAAA,MACxD,YAAY,IAAA,CAAK;AAAA,KAClB,CAAA,CACA,SAAA,CAAgC,QAAQ,CAAA;AAE3C,IAAA,OAAO,MAAA,CAAO,CAAC,CAAA,CAAE,MAAA;AAAA,EACnB;AAAA,EAEA,MAAM,wBACJ,YAAA,EAC2B;AAC3B,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,kBAAkB,EACtC,KAAA,CAAM,EAAE,YAAA,EAAc,CAAA,CACtB,MAAA,CAEC,QAAA,EAAU,cAAA,EAAgB,qBAAqB,YAAY,CAAA;AAAA,EACjE;AAAA,EAEA,MAAM,yBACJ,YAAA,EACqC;AACrC,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,kBAAkB,EACtC,KAAA,CAAM,EAAE,YAAA,EAAc,CAAA,CACtB,OAAA,CAAQ,YAAA,EAAc,MAAM,EAC5B,KAAA,EAAsB;AAAA,EAC3B;AACF;AAUO,MAAM,gBAAA,CAAiB;AAAA,EAC5B,YAA6B,IAAA,EAAwB;AAAxB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAyB;AAAA,EAAzB,IAAA;AAAA,EAE7B,MAAM,eAAA,CACJ,MAAA,EACA,QAAA,EACA,OAAe,WAAA,EACA;AACf,IAAA,MAAM,IAAA,CAAK,KAAK,gBAAgB,CAAA,CAAE,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,IAAA,EAAM,CAAA;AAAA,EACrE;AAAA,EAEA,MAAM,sBAAsB,MAAA,EAAyC;AACnE,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,gBAAgB,EACpC,KAAA,CAAM,EAAE,MAAA,EAAQ,CAAA,CAChB,MAAA,CAAuB,IAAA,EAAM,QAAA,EAAU,YAAY,MAAM,CAAA;AAAA,EAC9D;AAAA,EAEA,MAAM,gBAAA,GAA4C;AAChD,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,gBAAgB,CAAA,CAAE,MAAA;AAAA,MACvC,IAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF;AAWO,MAAM,uBAAA,CAAwB;AAAA,EACnC,YAA6B,IAAA,EAAwB;AAAxB,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAAA,EAAyB;AAAA,EAAzB,IAAA;AAAA,EAE7B,MAAM,cAAA,CACJ,UAAA,EACA,YAAA,EACiB;AACjB,IAAA,MAAM,CAAC,WAAW,CAAA,GAAI,MAAM,KAAK,IAAA,CAAK,wBAAwB,EAC3D,MAAA,CAAO;AAAA,MACN,WAAA,EAAa,UAAA;AAAA,MACb;AAAA,KACD,CAAA,CACA,SAAA,CAAU,IAAI,CAAA;AACjB,IAAA,OAAO,WAAA,CAAY,EAAA;AAAA,EACrB;AAAA,EAEA,MAAM,6BACJ,YAAA,EAC2C;AAC3C,IAAA,MAAM,SAAS,MAAM,IAAA,CAAK,IAAA,CAAK,wBAAwB,EACpD,MAAA,CAAO;AAAA,MACN,EAAA,EAAI,IAAA;AAAA,MACJ,UAAA,EAAY,aAAA;AAAA,MACZ,YAAA,EAAc,cAAA;AAAA,MACd,SAAA,EAAW;AAAA,KACZ,CAAA,CACA,KAAA,CAAM,EAAE,YAAA,EAA4B,CAAA,CACpC,OAAA,CAAQ,YAAA,EAAc,MAAM,CAAA,CAC5B,KAAA,EAAM;AACT,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,MAAM,4BACJ,YAAA,EACiC;AACjC,IAAA,OAAO,MAAM,IAAA,CAAK,IAAA,CAAK,wBAAwB,CAAA,CAC5C,MAAM,EAAE,YAAA,EAA4B,CAAA,CACpC,MAAA,CAAO;AAAA,MACN,EAAA,EAAI,IAAA;AAAA,MACJ,UAAA,EAAY,aAAA;AAAA,MACZ,YAAA,EAAc,cAAA;AAAA,MACd,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACL;AACF;;;;;;;;"}

package/dist/generated/openapidocument.cjs.js

@@ -63,6 +63,37 @@ const OPENAPI = `
         }
       }
     },
+    "/scm-hosts": {
+      "get": {
+        "operationId": "findAllSCMHosts",
+        "summary": "Retrieve the SCM Integration hosts",
+        "security": [
+          {
+            "BearerAuth": []
+          }
+        ],
+        "tags": [
+          "Management"
+        ],
+        "responses": {
+          "200": {
+            "description": "List of Integrations available to the Bulk Import plugin",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/SCMHostList"
+                },
+                "examples": {
+                  "multipleRepos": {
+                    "$ref": "#/components/examples/scmHosts"
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/organizations": {
       "get": {
         "operationId": "findAllOrganizations",
@@ -165,6 +196,9 @@ const OPENAPI = `
           },
           {
             "$ref": "#/components/parameters/approvalToolParam"
+          },
+          {
+            "$ref": "#/components/parameters/xSCMTokensHeaderParam"
           }
         ],
         "responses": {
@@ -234,6 +268,9 @@ const OPENAPI = `
           },
           {
             "$ref": "#/components/parameters/approvalToolParam"
+          },
+          {
+            "$ref": "#/components/parameters/xSCMTokensHeaderParam"
           }
         ],
         "responses": {
@@ -974,6 +1011,16 @@ const OPENAPI = `
           "default": "v1"
         }
       },
+      "xSCMTokensHeaderParam": {
+        "in": "header",
+        "name": "x-scm-tokens",
+        "description": "Optional JSON-encoded map of SCM host URL to user authentication token. Used to fetch repositories on behalf of the user for each configured SCM host. The value must be a JSON string whose structure matches SCMTokenMap (keys are SCM base URLs, values are OAuth bearer tokens).\\n",
+        "required": false,
+        "schema": {
+          "type": "string",
+          "example": "{\\"https://github.com\\":\\"ghp_xxx\\",\\"https://ghe.example.com\\":\\"ghe_yyy\\"}"
+        }
+      },
       "pagePerIntegrationQueryParam": {
         "in": "query",
         "name": "pagePerIntegration",
@@ -1079,6 +1126,36 @@ const OPENAPI = `
       }
     },
     "schemas": {
+      "SCMTokenMap": {
+        "title": "SCM Token Map",
+        "type": "object",
+        "description": "Map of SCM integration base URL to the user's OAuth access token for that host. Keys must match the base URLs returned by GET /scm-hosts (e.g. https://github.com or https://gitlab.corp.com). Values must be non-empty OAuth bearer tokens scoped to the minimum required access (read-only repository listing). Unknown keys are silently ignored by the server.\\n",
+        "additionalProperties": {
+          "type": "string"
+        },
+        "example": {
+          "https://github.com": "ghp_xxx",
+          "https://ghe.example.com": "ghe_yyy"
+        }
+      },
+      "SCMHostList": {
+        "title": "SCM Host List",
+        "type": "object",
+        "properties": {
+          "github": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "gitlab": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        }
+      },
       "OrganizationList": {
         "title": "Organization List",
         "type": "object",
@@ -1538,6 +1615,18 @@ const OPENAPI = `
       }
     },
     "examples": {
+      "scmHosts": {
+        "summary": "Multiple scmHosts",
+        "value": {
+          "github": [
+            "https://github.com",
+            "https://ghe.example.com"
+          ],
+          "gitlab": [
+            "https://gitlab.com"
+          ]
+        }
+      },
       "multipleOrgs": {
         "summary": "Multiple organizations",
         "value": {