@senad-d/branchme 0.1.1 → 0.1.2

package/README.md

@@ -6,6 +6,7 @@
   <a href="https://pi.dev"><img alt="pi package" src="https://img.shields.io/badge/pi-package-6f42c1?style=flat-square" /></a>
   <a href="https://www.npmjs.com/package/@senad-d/branchme"><img alt="npm" src="https://img.shields.io/npm/v/%40senad-d%2Fbranchme?style=flat-square" /></a>
   <a href="LICENSE"><img alt="license" src="https://img.shields.io/badge/license-MIT-blue?style=flat-square" /></a>
+  <a align="center" href="https://sonarcloud.io/summary/new_code?id=senad-d_BranchMe"><img alt="Quality Gate Status" src="https://sonarcloud.io/api/project_badges/measure?project=senad-d_BranchMe&metric=alert_status" /></a>
 </p>
 
 <p align="center">
@@ -272,7 +273,7 @@ Ensure the token and Git credentials have permission for the branch and pull req
 | PR branch does not exist locally | Create or fetch/check out the local `headBranch` and `baseBranch` branches first; BranchMe does not use remote-only or cross-repository PR refs. |
 | PR branch is not visible or is stale on GitHub | Run `push_branch`, wait for it to complete, then retry `pull_request`; do not batch `push_branch` and `pull_request` in the same assistant tool call. |
 | Repository mismatch | Make `origin` and `GITHUB_REPOSITORY` refer to the same `owner/repo`. |
-| Need a commit | Use CommitMe or normal git commands; BranchMe never commits. |
+| Need a commit | Use BranchMe or normal git commands; BranchMe never commits. |
 | Other extensions interfere | Test with `pi --no-extensions -e .`. |
 
 ---

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@senad-d/branchme",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "type": "module",
   "description": "Minimal Pi extension for current-repository git branch, push, and pull request workflows.",
   "license": "MIT",
@@ -49,6 +49,7 @@
     "lint": "npm run typecheck && npm run format:check && npm run check",
     "format:check": "node scripts/check-format.mjs",
     "test": "node --test test/*.test.mjs",
+    "test:coverage": "mkdir -p coverage && node --test --experimental-test-coverage --test-reporter=spec --test-reporter=lcov --test-reporter-destination=stdout --test-reporter-destination=coverage/lcov.info test/*.test.mjs",
     "smoke:pi": "node scripts/smoke-pi-runtime.mjs",
     "smoke:pi:packed": "node scripts/smoke-pi-installed-package.mjs",
     "check": "node --check scripts/check-format.mjs && node --check scripts/check-package-contents.mjs && node --check scripts/publish-npm.mjs && node --check scripts/smoke-pi-installed-package.mjs && node --check scripts/smoke-pi-runtime.mjs",

package/src/commands/branchme-command.ts

@@ -82,7 +82,9 @@ function summaryRepository(data: BranchMePanelData): string {
 }
 
 function summaryToken(data: BranchMePanelData): string {
-  return data.tokenWarning ? `warning: ${data.tokenWarning}` : data.tokenSource ? `present (${data.tokenSource})` : "not set";
+  if (data.tokenWarning) return `warning: ${data.tokenWarning}`;
+  if (data.tokenSource) return `present (${data.tokenSource})`;
+  return "not set";
 }
 
 function summaryStatusWarning(data: BranchMePanelData): string {

package/src/git.ts

@@ -52,7 +52,7 @@ export async function withRepositoryMutationQueue<T>(repoRoot: string, operation
 }
 
 function trimOutput(value: string): string {
-  return value.replace(/\s+$/u, "");
+  return value.trimEnd();
 }
 
 function compactOutput(value: string): string {
@@ -191,7 +191,7 @@ function validateRemoteName(remote: string): void {
   if (remote.includes(":") || remote.includes("@")) {
     throw new Error("Unable to push current branch: upstream remote name cannot be a URL or user-prefixed target.");
   }
-  if (/[\u0000-\u001f\u007f\s]/u.test(remote)) {
+  if (/[\u0000-\u001f\u007f]/u.test(remote) || /\s/u.test(remote)) {
     throw new Error("Unable to push current branch: upstream remote contains whitespace or control characters.");
   }
 }
@@ -290,13 +290,13 @@ export async function getAheadBehindCount(
   const ahead = Number(aheadText);
   const behind = Number(behindText);
   if (!Number.isFinite(ahead) || !Number.isFinite(behind)) {
-    throw new Error(`Unable to parse ahead/behind counts from git output: ${safeOutput(result.stdout)}`);
+    throw new TypeError(`Unable to parse ahead/behind counts from git output: ${safeOutput(result.stdout)}`);
   }
   return { ahead, behind };
 }
 
 export function validateBranchNameInput(branchName: unknown, label = "Branch name"): asserts branchName is string {
-  if (typeof branchName !== "string") throw new Error(`${label} must be a string.`);
+  if (typeof branchName !== "string") throw new TypeError(`${label} must be a string.`);
   if (branchName.length === 0) throw new Error(`${label} is required.`);
   if (branchName.trim().length === 0) throw new Error(`${label} cannot be blank.`);
   if (branchName !== branchName.trim()) throw new Error(`${label} cannot start or end with whitespace.`);

package/src/github.ts

@@ -80,16 +80,26 @@ export function repositoryLabel(repository: GitHubRepository): string {
   return `${repository.owner}/${repository.repo}`;
 }
 
+function trimPathSlashes(pathname: string): string {
+  let start = 0;
+  let end = pathname.length;
+
+  while (start < end && pathname.charAt(start) === "/") start += 1;
+  while (end > start && pathname.charAt(end - 1) === "/") end -= 1;
+
+  return pathname.slice(start, end);
+}
+
 export function parseGitHubRepository(value: string): GitHubRepository | null {
   const input = value.trim();
   if (!input) return null;
 
-  const scpLike = input.match(/^git@github\.com:([^\s/]+)\/([^\s/]+)$/iu);
+  const scpLike = /^git@github\.com:([^\s/]+)\/([^\s/]+)$/iu.exec(input);
   if (scpLike) {
     return normalizeRepository(scpLike[1] ?? "", scpLike[2] ?? "");
   }
 
-  const shorthand = input.match(/^([^\s/:]+)\/([^\s/]+)$/u);
+  const shorthand = /^([^\s/:]+)\/([^\s/]+)$/u.exec(input);
   if (shorthand) {
     return normalizeRepository(shorthand[1] ?? "", shorthand[2] ?? "");
   }
@@ -105,7 +115,7 @@ export function parseGitHubRepository(value: string): GitHubRepository | null {
   if (parsed.protocol !== "https:" && parsed.protocol !== "ssh:") return null;
   if (parsed.protocol === "ssh:" && parsed.username && parsed.username !== "git") return null;
 
-  const parts = parsed.pathname.replace(/^\/+|\/+$/gu, "").split("/");
+  const parts = trimPathSlashes(parsed.pathname).split("/");
   if (parts.length !== 2) return null;
   return normalizeRepository(parts[0] ?? "", parts[1] ?? "");
 }
@@ -139,6 +149,20 @@ function decodeDoubleQuotedDotEnvValue(value: string): string {
   });
 }
 
+function isWhitespaceCharacter(character: string): boolean {
+  return character.trim() === "";
+}
+
+function stripDotEnvInlineComment(value: string): string {
+  for (let index = 1; index < value.length; index += 1) {
+    if (value.charAt(index) === "#" && isWhitespaceCharacter(value.charAt(index - 1))) {
+      return value.slice(0, index);
+    }
+  }
+
+  return value;
+}
+
 function parseDotEnvValue(rawValue: string): string {
   const value = rawValue.trim();
   if (!value) return "";
@@ -151,7 +175,7 @@ function parseDotEnvValue(rawValue: string): string {
     return value.slice(1, -1).trim();
   }
 
-  return value.replace(/\s+#.*$/u, "").trim();
+  return stripDotEnvInlineComment(value).trim();
 }
 
 function parseDotEnvTokens(contents: string): Partial<Record<TokenEnvironmentKey, string>> {
@@ -162,13 +186,13 @@ function parseDotEnvTokens(contents: string): Partial<Record<TokenEnvironmentKey
     if (!trimmed || trimmed.startsWith("#")) continue;
 
     const assignment = trimmed.startsWith("export ") ? trimmed.slice("export ".length).trimStart() : trimmed;
-    const match = assignment.match(/^([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/u);
-    if (!match) continue;
+    const separatorIndex = assignment.indexOf("=");
+    if (separatorIndex === -1) continue;
 
-    const key = match[1] ?? "";
+    const key = assignment.slice(0, separatorIndex).trim();
     if (!isTokenEnvironmentKey(key)) continue;
 
-    tokens[key] = parseDotEnvValue(match[2] ?? "");
+    tokens[key] = parseDotEnvValue(assignment.slice(separatorIndex + 1).trimStart());
   }
 
   return tokens;
@@ -294,29 +318,40 @@ function requireStringRef(value: unknown, field: "headBranch" | "baseBranch"): s
   return value;
 }
 
-export function validatePullRequestBranchRef(value: unknown, field: "headBranch" | "baseBranch"): void {
-  const ref = requireStringRef(value, field);
+const PULL_REQUEST_REF_INVALID_CHARACTER_PATTERN = /[~^?*[\]]/u;
 
-  if (/[\u0000-\u001f\u007f]/u.test(ref)) throw new Error(`${field} cannot contain control characters.`);
-  if (/\s/u.test(ref)) throw new Error(`${field} cannot contain whitespace.`);
+function validatePullRequestRefCharacters(ref: string, field: "headBranch" | "baseBranch"): void {
   if (ref.includes(":")) throw new Error(`${field} cannot contain ':' or an owner-prefixed cross-repository ref.`);
   if (ref.includes("\\")) throw new Error(`${field} cannot contain backslashes.`);
-  if (/[~^?*[\]]/u.test(ref)) throw new Error(`${field} contains characters that are not valid in a branch ref.`);
+  if (PULL_REQUEST_REF_INVALID_CHARACTER_PATTERN.test(ref)) {
+    throw new Error(`${field} contains characters that are not valid in a branch ref.`);
+  }
+}
+
+function validatePullRequestRefPathShape(ref: string, field: "headBranch" | "baseBranch"): void {
   if (ref.includes("..")) throw new Error(`${field} cannot contain path traversal-like '..' segments.`);
   if (ref.includes("@{")) throw new Error(`${field} cannot contain '@{'.`);
   if (ref.includes("//")) throw new Error(`${field} cannot contain empty path segments.`);
   if (ref.startsWith("/") || ref.endsWith("/")) throw new Error(`${field} cannot start or end with '/'.`);
-  if (ref.startsWith("-")) throw new Error(`${field} cannot start with '-'.`);
   if (ref.endsWith(".")) throw new Error(`${field} cannot end with '.'.`);
   if (ref === "@") throw new Error(`${field} cannot be '@'.`);
   if (ref.startsWith("refs/")) throw new Error(`${field} must be a branch name, not a full ref path.`);
+}
 
+function validatePullRequestRefSegments(ref: string, field: "headBranch" | "baseBranch"): void {
   for (const segment of ref.split("/")) {
     if (segment === "." || segment === "..") throw new Error(`${field} cannot contain path traversal segments.`);
     if (segment.endsWith(".lock")) throw new Error(`${field} cannot contain '.lock' path segments.`);
   }
 }
 
+export function validatePullRequestBranchRef(value: unknown, field: "headBranch" | "baseBranch"): void {
+  const ref = requireStringRef(value, field);
+  validatePullRequestRefCharacters(ref, field);
+  validatePullRequestRefPathShape(ref, field);
+  validatePullRequestRefSegments(ref, field);
+}
+
 function validatePullRequestInput(input: unknown): asserts input is PullRequestInput {
   if (!isRecord(input)) throw new Error("Pull request input must be an object.");
   validatePullRequestBranchRef(input.headBranch, "headBranch");
@@ -399,72 +434,110 @@ function gitHubJsonHeaders(token: string): Record<string, string> {
   };
 }
 
-export async function ensureGitHubBranchExists(
-  repository: GitHubRepository,
-  branchName: string,
-  field: "headBranch" | "baseBranch",
-  token: string,
-  options: PullRequestFetchOptions = {},
-): Promise<GitHubBranchDetails> {
-  validateGitHubRepository(repository);
-  validatePullRequestBranchRef(branchName, field);
-
-  const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+function requireFetchImplementation(fetchImpl: typeof fetch | undefined): typeof fetch {
   if (typeof fetchImpl !== "function") throw new Error("fetch is unavailable in this Node.js runtime.");
+  return fetchImpl;
+}
 
-  const branchLabel = redactSecrets(branchName);
-  const url = `${GITHUB_API_BASE_URL}/repos/${encodePathSegment(repository.owner)}/${encodePathSegment(repository.repo)}/branches/${encodePathSegment(branchName)}`;
+function redactedErrorMessage(error: unknown, tokens: readonly string[]): string {
+  const message = error instanceof Error ? error.message : String(error);
+  return redactSecrets(message, tokens);
+}
 
-  let response: Response;
+async function fetchGitHubResponse(
+  fetchImpl: typeof fetch,
+  url: string,
+  init: RequestInit,
+  failurePrefix: string,
+  token: string,
+): Promise<Response> {
   try {
-    response = await fetchImpl(url, {
-      method: "GET",
-      headers: gitHubJsonHeaders(token),
-      signal: options.signal,
-    });
+    return await fetchImpl(url, init);
   } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    throw new Error(`GitHub branch preflight request failed for ${field} '${branchLabel}': ${redactSecrets(message, [token])}`);
+    throw new Error(`${failurePrefix}: ${redactedErrorMessage(error, [token])}`);
   }
+}
 
-  if (response.ok) {
-    let body: BoundedResponseBody;
-    try {
-      body = await readBoundedResponseText(response, options.signal);
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      throw new Error(`GitHub branch preflight response for ${field} '${branchLabel}' could not be read: ${redactSecrets(message, [token])}`);
-    }
-
-    if (body.truncated) throw new Error(`GitHub branch preflight response exceeded the ${GITHUB_RESPONSE_BODY_LIMIT_BYTES} byte limit.`);
-
-    let payload: unknown;
-    try {
-      payload = JSON.parse(body.text);
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      throw new Error(`GitHub branch preflight response was not valid JSON: ${redactSecrets(message, [token])}`);
-    }
-
-    if (!isRecord(payload)) throw new Error("GitHub branch preflight response was not an object.");
-    const commit = isRecord(payload.commit) ? stringField(payload.commit.sha, "commit.sha") : "";
-    if (!/^[0-9a-f]{40,64}$/iu.test(commit)) throw new Error("GitHub branch preflight response is missing commit.sha.");
-
-    return {
-      name: typeof payload.name === "string" && payload.name ? payload.name : branchName,
-      commitSha: commit,
-    };
+async function readGitHubResponseBody(
+  response: Response,
+  signal: AbortSignal | undefined,
+  failurePrefix: string,
+  token: string,
+): Promise<BoundedResponseBody> {
+  try {
+    return await readBoundedResponseText(response, signal);
+  } catch (error) {
+    throw new Error(`${failurePrefix}: ${redactedErrorMessage(error, [token])}`);
   }
+}
 
-  let body: BoundedResponseBody;
+function parseGitHubJson(text: string, responseContext: string, token: string): unknown {
   try {
-    body = await readBoundedResponseText(response, options.signal);
+    return JSON.parse(text);
   } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    throw new Error(
-      `GitHub branch preflight failed for ${field} '${branchLabel}' with HTTP ${response.status}: unable to read error response: ${redactSecrets(message, [token])}`,
-    );
+    throw new Error(`${responseContext} was not valid JSON: ${redactedErrorMessage(error, [token])}`);
   }
+}
+
+function requireGitHubResponseObject(payload: unknown, responseContext: string): Record<string, unknown> {
+  if (!isRecord(payload)) throw new Error(`${responseContext} was not an object.`);
+  return payload;
+}
+
+async function readGitHubJsonObject(
+  response: Response,
+  signal: AbortSignal | undefined,
+  token: string,
+  responseContext: string,
+  readFailurePrefix: string,
+): Promise<Record<string, unknown>> {
+  const body = await readGitHubResponseBody(response, signal, readFailurePrefix, token);
+  if (body.truncated) throw new Error(`${responseContext} exceeded the ${GITHUB_RESPONSE_BODY_LIMIT_BYTES} byte limit.`);
+  return requireGitHubResponseObject(parseGitHubJson(body.text, responseContext, token), responseContext);
+}
+
+function parseGitHubBranchDetails(payload: Record<string, unknown>, branchName: string): GitHubBranchDetails {
+  const commit = isRecord(payload.commit) ? stringField(payload.commit.sha, "commit.sha") : "";
+  if (!/^[0-9a-f]{40,64}$/iu.test(commit)) throw new Error("GitHub branch preflight response is missing commit.sha.");
+
+  return {
+    name: typeof payload.name === "string" && payload.name ? payload.name : branchName,
+    commitSha: commit,
+  };
+}
+
+async function readGitHubBranchDetails(
+  response: Response,
+  signal: AbortSignal | undefined,
+  token: string,
+  branchName: string,
+  field: "headBranch" | "baseBranch",
+  branchLabel: string,
+): Promise<GitHubBranchDetails> {
+  const payload = await readGitHubJsonObject(
+    response,
+    signal,
+    token,
+    "GitHub branch preflight response",
+    `GitHub branch preflight response for ${field} '${branchLabel}' could not be read`,
+  );
+  return parseGitHubBranchDetails(payload, branchName);
+}
+
+async function throwGitHubBranchPreflightHttpError(
+  response: Response,
+  signal: AbortSignal | undefined,
+  token: string,
+  repository: GitHubRepository,
+  field: "headBranch" | "baseBranch",
+  branchLabel: string,
+): Promise<never> {
+  const body = await readGitHubResponseBody(
+    response,
+    signal,
+    `GitHub branch preflight failed for ${field} '${branchLabel}' with HTTP ${response.status}: unable to read error response`,
+    token,
+  );
 
   if (response.status === 404) {
     throw new Error(
@@ -477,79 +550,45 @@ export async function ensureGitHubBranchExists(
   );
 }
 
-export async function createGitHubPullRequest(
-  repository: GitHubRepository,
-  input: PullRequestInput,
-  token: string,
-  options: PullRequestFetchOptions = {},
-): Promise<PullRequestDetails> {
-  validateGitHubRepository(repository);
-  validatePullRequestInput(input);
-
-  const fetchImpl = options.fetchImpl ?? globalThis.fetch;
-  if (typeof fetchImpl !== "function") throw new Error("fetch is unavailable in this Node.js runtime.");
-
-  const url = `${GITHUB_API_BASE_URL}/repos/${encodePathSegment(repository.owner)}/${encodePathSegment(repository.repo)}/pulls`;
-  const requestBody = {
+function pullRequestRequestBody(input: PullRequestInput): Record<string, unknown> {
+  return {
     title: input.title,
     head: input.headBranch,
     base: input.baseBranch,
     body: input.body,
     draft: input.draft,
   };
+}
 
-  let response: Response;
-  try {
-    response = await fetchImpl(url, {
-      method: "POST",
-      headers: gitHubJsonHeaders(token),
-      body: JSON.stringify(requestBody),
-      signal: options.signal,
-    });
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    throw new Error(`GitHub pull request request failed: ${redactSecrets(message, [token])}`);
-  }
-
-  if (!response.ok) {
-    let body: BoundedResponseBody;
-    try {
-      body = await readBoundedResponseText(response, options.signal);
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      throw new Error(
-        `GitHub pull request request failed with HTTP ${response.status}: unable to read error response: ${redactSecrets(message, [token])}`,
-      );
-    }
-
-    throw new Error(
-      `GitHub pull request request failed with HTTP ${response.status}: ${redactSecrets(truncate(body.text), [token])}`,
-    );
-  }
-
-  let responseBody: BoundedResponseBody;
-  try {
-    responseBody = await readBoundedResponseText(response, options.signal);
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    throw new Error(`GitHub pull request response could not be read: ${redactSecrets(message, [token])}`);
-  }
+async function throwGitHubPullRequestHttpError(
+  response: Response,
+  signal: AbortSignal | undefined,
+  token: string,
+): Promise<never> {
+  const body = await readGitHubResponseBody(
+    response,
+    signal,
+    `GitHub pull request request failed with HTTP ${response.status}: unable to read error response`,
+    token,
+  );
 
-  if (responseBody.truncated) {
-    throw new Error(`GitHub pull request response exceeded the ${GITHUB_RESPONSE_BODY_LIMIT_BYTES} byte limit.`);
-  }
+  throw new Error(`GitHub pull request request failed with HTTP ${response.status}: ${redactSecrets(truncate(body.text), [token])}`);
+}
 
-  let payload: unknown;
-  try {
-    payload = JSON.parse(responseBody.text);
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    throw new Error(`GitHub pull request response was not valid JSON: ${redactSecrets(message, [token])}`);
-  }
+async function readPullRequestPayload(
+  response: Response,
+  signal: AbortSignal | undefined,
+  token: string,
+): Promise<Record<string, unknown>> {
+  return readGitHubJsonObject(response, signal, token, "GitHub pull request response", "GitHub pull request response could not be read");
+}
 
-  if (!isRecord(payload)) throw new Error("GitHub pull request response was not an object.");
+function pullRequestDetailsFromPayload(
+  repository: GitHubRepository,
+  input: PullRequestInput,
+  payload: Record<string, unknown>,
+): PullRequestDetails {
   const number = pullRequestNumberField(payload.number);
-
   const head = isRecord(payload.head) ? stringField(payload.head.ref, "head.ref") : input.headBranch;
   const base = isRecord(payload.base) ? stringField(payload.base.ref, "base.ref") : input.baseBranch;
   const draft = typeof payload.draft === "boolean" ? payload.draft : input.draft;
@@ -564,3 +603,62 @@ export async function createGitHubPullRequest(
     draft,
   };
 }
+
+export async function ensureGitHubBranchExists(
+  repository: GitHubRepository,
+  branchName: string,
+  field: "headBranch" | "baseBranch",
+  token: string,
+  options: PullRequestFetchOptions = {},
+): Promise<GitHubBranchDetails> {
+  validateGitHubRepository(repository);
+  validatePullRequestBranchRef(branchName, field);
+
+  const fetchImpl = requireFetchImplementation(options.fetchImpl ?? globalThis.fetch);
+  const branchLabel = redactSecrets(branchName);
+  const url = `${GITHUB_API_BASE_URL}/repos/${encodePathSegment(repository.owner)}/${encodePathSegment(repository.repo)}/branches/${encodePathSegment(branchName)}`;
+  const response = await fetchGitHubResponse(
+    fetchImpl,
+    url,
+    { method: "GET", headers: gitHubJsonHeaders(token), signal: options.signal },
+    `GitHub branch preflight request failed for ${field} '${branchLabel}'`,
+    token,
+  );
+
+  if (!response.ok) {
+    return throwGitHubBranchPreflightHttpError(response, options.signal, token, repository, field, branchLabel);
+  }
+
+  return readGitHubBranchDetails(response, options.signal, token, branchName, field, branchLabel);
+}
+
+export async function createGitHubPullRequest(
+  repository: GitHubRepository,
+  input: PullRequestInput,
+  token: string,
+  options: PullRequestFetchOptions = {},
+): Promise<PullRequestDetails> {
+  validateGitHubRepository(repository);
+  validatePullRequestInput(input);
+
+  const fetchImpl = requireFetchImplementation(options.fetchImpl ?? globalThis.fetch);
+  const url = `${GITHUB_API_BASE_URL}/repos/${encodePathSegment(repository.owner)}/${encodePathSegment(repository.repo)}/pulls`;
+  const requestBody = pullRequestRequestBody(input);
+  const response = await fetchGitHubResponse(
+    fetchImpl,
+    url,
+    {
+      method: "POST",
+      headers: gitHubJsonHeaders(token),
+      body: JSON.stringify(requestBody),
+      signal: options.signal,
+    },
+    "GitHub pull request request failed",
+    token,
+  );
+
+  if (!response.ok) return throwGitHubPullRequestHttpError(response, options.signal, token);
+
+  const payload = await readPullRequestPayload(response, options.signal, token);
+  return pullRequestDetailsFromPayload(repository, input, payload);
+}

package/src/redaction.ts

@@ -1,7 +1,7 @@
-const URL_USERINFO_PATTERN = /\b([A-Za-z][A-Za-z0-9+.-]*:\/\/)([^\s/@]+(?:[^\s/@]*))@/gu;
-const BEARER_PATTERN = /\bBearer\s+[A-Za-z0-9._~+/=-]+/giu;
-const GITHUB_CLASSIC_PAT_PATTERN = /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9_]+\b/gu;
-const GITHUB_FINE_GRAINED_PAT_PATTERN = /\bgithub_pat_[A-Za-z0-9_]+\b/giu;
+const URL_USERINFO_PATTERN = /\b([A-Za-z][A-Za-z0-9+.-]*:\/\/)[^\s/@]+@/gu;
+const BEARER_PATTERN = /\bBearer\s+[\w.~+/=-]+/giu;
+const GITHUB_CLASSIC_PAT_PATTERN = /\b(?:ghp|gho|ghu|ghs|ghr)_\w+\b/gu;
+const GITHUB_FINE_GRAINED_PAT_PATTERN = /\bgithub_pat_\w+\b/giu;
 const TOKEN_KEY_PATTERN = /\b(token|access_token|authorization|github_token|gh_token)(["']?\s*[:=]\s*["']?)([^\s"',}]+)/giu;
 
 export function redactSecrets(value: string, tokens: readonly string[] = []): string {

package/src/ui/branchme-panel.ts

@@ -32,11 +32,11 @@ const MAX_PANEL_WIDTH = 96;
 const MAX_PANEL_HEIGHT = 14;
 const BODY_HEIGHT = 7;
 const PANEL_SECTIONS: BranchMePanelSection[] = ["status", "workflow"];
-const ANSI_RESET = /\u001b\[0m/gu;
+const ANSI_RESET = "\u001b[0m";
 
 function truncateVisible(value: string, width: number, ellipsis = "…", pad = false): string {
   const truncated = truncateToWidth(value, width, ellipsis, pad);
-  return value.includes("\u001b") ? truncated : truncated.replace(ANSI_RESET, "");
+  return value.includes("\u001b") ? truncated : truncated.replaceAll(ANSI_RESET, "");
 }
 
 function sanitize(value: string): string {
@@ -334,7 +334,9 @@ export class BranchMePanel {
     }
   }
 
-  invalidate(): void {}
+  invalidate(): void {
+    // Intentional no-op: BranchMePanel has no external cache to refresh; input handlers request renders through onChange.
+  }
 
   private moveSelection(delta: number): void {
     const currentIndex = sectionIndex(this.selectedSection);