@sentry/junior-github 0.81.0 → 0.82.0

package/permissions.js

@@ -1,77 +0,0 @@
-const LEVELS = new Set(["read", "write", "admin"]);
-// GitHub documents these installation-token permission fields as write-only.
-const WRITE_ONLY_PERMISSIONS = new Set(["profile", "workflows"]);
-
-function isLevel(value) {
-  return LEVELS.has(value);
-}
-
-function normalizeScope(rawScope) {
-  return String(rawScope).trim().replace(/-/g, "_");
-}
-
-/** Validate configured GitHub App permissions before using them in grants. */
-export function normalizePermissions(permissions) {
-  if (permissions === undefined) {
-    return undefined;
-  }
-
-  const entries = Object.entries(permissions);
-  if (entries.length === 0) {
-    throw new Error(
-      "githubPlugin appPermissions must contain at least one permission when provided.",
-    );
-  }
-
-  const request = {};
-  for (const [rawScope, rawLevel] of entries) {
-    const normalizedScope = normalizeScope(rawScope);
-    if (!normalizedScope) {
-      throw new Error(
-        "githubPlugin appPermissions contains an empty permission name.",
-      );
-    }
-    if (!/^[a-z][a-z0-9_]*$/.test(normalizedScope)) {
-      throw new Error(
-        `githubPlugin appPermissions contains invalid permission "${rawScope}".`,
-      );
-    }
-    if (!isLevel(rawLevel)) {
-      throw new Error(
-        `githubPlugin appPermissions.${rawScope} must be "read", "write", or "admin".`,
-      );
-    }
-    request[normalizedScope] = rawLevel;
-  }
-  return request;
-}
-
-/** Build the read-only installation-token permission body. */
-export function readGrantPermissions(permissions) {
-  const readOnly = { metadata: "read" };
-  for (const [scope, level] of Object.entries(permissions ?? {})) {
-    if (!isLevel(level)) {
-      throw new Error(
-        `GitHub permission "${scope}" returned invalid level "${String(level)}".`,
-      );
-    }
-    if (!WRITE_ONLY_PERMISSIONS.has(scope)) {
-      readOnly[scope] = "read";
-    }
-  }
-  return readOnly;
-}
-
-/** Expose configured permissions as plugin capabilities for host policy checks. */
-export function permissionCapabilities(permissions) {
-  if (permissions === undefined) {
-    return undefined;
-  }
-
-  return Object.entries(permissions)
-    .map(([normalizedScope, rawLevel]) => {
-      const scope = normalizedScope.replace(/_/g, "-");
-      return `github.${scope}.${rawLevel}`;
-    })
-    .sort();
-}