@shipfox/api-integration-github 2.0.0

package/.turbo/turbo-build.log

@@ -0,0 +1,2 @@
+$ shipfox-swc
+Successfully compiled: 28 files with swc (66.52ms)

package/.turbo/turbo-type$colon$emit.log

@@ -0,0 +1 @@
+$ shipfox-tsc-emit

package/.turbo/turbo-type.log

@@ -0,0 +1 @@
+$ shipfox-tsc-check

package/CHANGELOG.md

@@ -0,0 +1,138 @@
+# @shipfox/api-integration-github
+
+## 2.0.0
+
+### Minor Changes
+
+- 1b0d344: Publishes the complete API runtime closure with packed-consumer-safe internal imports and records its exact package set in application releases.
+
+### Patch Changes
+
+- Updated dependencies [c31a7e0]
+- Updated dependencies [1b0d344]
+- Updated dependencies [521e006]
+  - @shipfox/api-workspaces@2.0.0
+  - @shipfox/api-auth-context@2.0.0
+  - @shipfox/api-integration-core-dto@2.0.0
+  - @shipfox/api-integration-github-dto@2.0.0
+  - @shipfox/config@1.2.1
+  - @shipfox/node-drizzle@0.2.1
+  - @shipfox/node-fastify@0.2.1
+  - @shipfox/node-opentelemetry@0.5.0
+  - @shipfox/node-postgres@0.4.1
+
+## 0.1.2
+
+### Patch Changes
+
+- @shipfox/api-workspaces@0.1.2
+
+## 0.1.1
+
+### Patch Changes
+
+- Updated dependencies [ec75cd5]
+- Updated dependencies [6a1fb54]
+  - @shipfox/node-drizzle@0.2.0
+  - @shipfox/node-postgres@0.4.0
+  - @shipfox/api-workspaces@0.1.1
+
+## 0.1.0
+
+### Minor Changes
+
+- b8e49ff: Add the client-side Sentry install/connect flow and a workspace settings
+  integrations hub.
+  - `@shipfox/client-integrations`: shared `IntegrationGallerySection` (capability
+    filter, lifecycle pills, "Added" date, external link, connected-first
+    ordering, degraded status mode), shared `RedirectInstallPage` powering the
+    GitHub and new Sentry install pages, `SentryCallbackPage` with an explicit
+    workspace confirm (sessionStorage only pre-selects), two-tier retry, and the
+    Sentry hooks (`useCreateSentryInstallMutation`, `connectSentry`,
+    `useIntegrationConnectionsQuery`).
+  - `@shipfox/client-workspace-settings`: new `/workspaces/$wid/settings/integrations`
+    page and an Integrations entry in the settings nav.
+  - `@shipfox/client-router`: routes for the Sentry install page, the root-level
+    Sentry callback, and the settings integrations page.
+  - `@shipfox/react-ui`: `sentry` icon (monochrome, theme-aware).
+  - `@shipfox/api-integration-core-dto`: optional `external_url` on the connection
+    DTO and an optional `connectionExternalUrl` method on `IntegrationProvider`.
+  - `@shipfox/api-integration-core`: `GET /integration-connections` now returns
+    connections of every lifecycle status (the active-only filter prevented
+    clients from surfacing disabled/error state) and resolves `external_url`
+    per connection best-effort.
+  - `@shipfox/api-integration-sentry` / `@shipfox/api-integration-github`:
+    implement `connectionExternalUrl` (Sentry org URL via a new
+    by-connection-id installation lookup; GitHub installation settings URL).
+
+### Patch Changes
+
+- 115655e: Moves source-event translation to the integration module: source-control providers emit a typed, provider-agnostic `INTEGRATION_SOURCE_COMMIT_PUSHED` event via one transactional publisher, projects subscribes to it instead of decoding GitHub payloads, and branch-deletion pushes are dropped at the source.
+- ce062a9: Validates authored agent step integrations against provider tool catalogs and workspace connection capabilities.
+- f3614ae: Add `createCheckoutSpec()` to the integration source-control service and the GitHub provider. GitHub mints a short-lived, repo-scoped installation access token and returns it as structured `CheckoutCredentials` alongside a clean `repositoryUrl`; the secret is never embedded in the URL. `ref` defaults to the repository default branch, providers without checkout support raise a typed `IntegrationCheckoutUnsupportedError`, and a `redactCheckoutSpec()` helper masks the token for logging. Dormant until the checkout-token endpoint and runner enrichment are wired in; no runtime behavior changes yet.
+- 9f1c0ef: Harden integration connect against a concurrent same-install race. The installation upsert now only (re)points an installation at the connection that already owns it: the `onConflictDoUpdate` carries a `setWhere(connection_id = this connection)` predicate and throws `*InstallationAlreadyLinkedError` when the conflicting row belongs to a different connection. Two concurrent connects of the same provider install to different workspaces no longer leave one workspace with an active orphan connection while the install's webhooks silently route to the other; the losing transaction rolls back and surfaces a 409.
+- 0667cce: Skip publishing source pushes for non-active integration connections. Both the GitHub and Gitea push webhook handlers now treat a connection whose `lifecycleStatus` is not `active` (disabled/error) like an unknown one: the delivery is recorded for dedup but no source-push event is published, so a disabled connection no longer triggers workflow runs.
+- d6d4862: Add a Sentry integration provider that ingests issue webhooks.
+  - New `@shipfox/api-integration-sentry` + `-sentry-dto` packages: a webhook
+    receiver that verifies the HMAC-SHA256 signature (keyed with the app client
+    secret), dedups on `Request-ID`, normalizes the issue payload, and publishes
+    `integrations.event.received` with `source: 'sentry'` and `event:
+issue.<action>`. A raw `ignored` action is normalized to `archived`. Malformed,
+    bad-JSON, unknown-action, and unknown-resource deliveries are recorded-and-dropped
+    with a 204 (deliberate deviation from GitHub's 400 to avoid Sentry disabling the
+    webhook).
+  - `@shipfox/api-integration-core-dto`: add the `SentryIssuePayload` contract.
+  - `@shipfox/api-integration-core`: register the Sentry provider behind
+    `INTEGRATIONS_ENABLE_SENTRY_PROVIDER`, add the
+    `updateIntegrationConnectionLifecycleStatus` helper, and pin stable
+    migration-tracking table names per provider database.
+  - `@shipfox/node-fastify`: add the shared `rawBodyPlugin` and `WEBHOOK_BODY_LIMIT`
+    exports for webhook receivers.
+  - `@shipfox/node-module`: add an optional `migrationsTableName` to `ModuleDatabase`
+    so conditionally-composed databases get a position-independent migration table.
+  - `@shipfox/api-integration-github`: consume the shared `rawBodyPlugin` instead of
+    a local copy (internal refactor, no behavior change).
+
+  Deploy note: environments with GitHub enabled must rename the existing
+  `__drizzle_migrations_integrations_1` table to
+  `__drizzle_migrations_integrations_github` as part of this release, or GitHub
+  migrations re-run against existing tables.
+
+- 82d22e4: Make the workspace-membership gate stateless. `requireWorkspaceAccess` now lives in `@shipfox/api-auth-context` and authorizes a request purely from the verified session-token claims, replacing the `requireMembership` gate in `@shipfox/api-workspaces` that read the workspace row from the database on every workspace-scoped request. Membership and role already travel in the token, so the check needs no database access.
+
+  This removes the per-request database read and severs the runtime dependency on `@shipfox/api-workspaces` from feature modules that only needed the membership gate (integration providers, secrets, projects, agent, runners). Workspace existence and `active`-status enforcement, which no code path currently exercises, moves off the hot path; enforce it at token issuance when workspace suspension is introduced.
+
+- 01be723: Adds a shared GitHub installation token provider with broad REST minting, in-memory reuse, refresh-margin reminting, single-flight dedupe, and a missing-installation provider error reason.
+- Updated dependencies [34ba284]
+- Updated dependencies [5707d6d]
+- Updated dependencies [b9c3f32]
+- Updated dependencies [d02c5fd]
+- Updated dependencies [a81b68c]
+- Updated dependencies [115655e]
+- Updated dependencies [c0a883c]
+- Updated dependencies [72ce351]
+- Updated dependencies [e47f8da]
+- Updated dependencies [ce062a9]
+- Updated dependencies [7b175f5]
+- Updated dependencies [f3614ae]
+- Updated dependencies [f92122b]
+- Updated dependencies [f8f339a]
+- Updated dependencies [857fd73]
+- Updated dependencies [b8e49ff]
+- Updated dependencies [d6d4862]
+- Updated dependencies [c0a883c]
+- Updated dependencies [6077301]
+- Updated dependencies [82d22e4]
+- Updated dependencies [01be723]
+- Updated dependencies [27770eb]
+- Updated dependencies [2933c33]
+- Updated dependencies [6181819]
+  - @shipfox/node-fastify@0.2.0
+  - @shipfox/node-drizzle@0.1.0
+  - @shipfox/api-workspaces@0.1.0
+  - @shipfox/api-auth-context@0.1.0
+  - @shipfox/api-integration-core-dto@0.1.0
+  - @shipfox/node-opentelemetry@0.4.2
+  - @shipfox/node-postgres@0.3.2
+  - @shipfox/api-integration-github-dto@0.0.1
+  - @shipfox/config@1.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Shipfox
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/api/client.d.ts

@@ -0,0 +1,90 @@
+export interface GithubAccount {
+    login: string;
+    type: string;
+}
+export interface GithubInstallationDetails {
+    id: number;
+    account: GithubAccount;
+    repositorySelection: string;
+    suspendedAt: Date | null;
+    htmlUrl: string;
+    raw: Record<string, unknown>;
+}
+export interface GithubRepository {
+    id: number;
+    ownerLogin: string;
+    name: string;
+    fullName: string;
+    defaultBranch: string;
+    private: boolean;
+    visibility?: string | undefined;
+    cloneUrl: string;
+    htmlUrl: string;
+}
+export interface GithubRepositoryPage {
+    repositories: GithubRepository[];
+    nextCursor: string | null;
+}
+export interface GithubFileEntry {
+    path: string;
+    size: number | null;
+}
+export interface GithubFilePage {
+    files: GithubFileEntry[];
+    nextCursor: string | null;
+}
+export interface GithubFileContent {
+    path: string;
+    content: string;
+    size: number;
+}
+export interface GithubUserInstallationPage {
+    installationIds: number[];
+    nextCursor: string | null;
+}
+export interface GithubApiClient {
+    exchangeOAuthCode(code: string): Promise<string>;
+    listUserInstallations(input: {
+        userAccessToken: string;
+        cursor?: string | undefined;
+    }): Promise<GithubUserInstallationPage>;
+    getInstallation(installationId: number): Promise<GithubInstallationDetails>;
+    listInstallationRepositories(input: {
+        installationId: number;
+        limit: number;
+        cursor?: string | undefined;
+    }): Promise<GithubRepositoryPage>;
+    getRepository(input: {
+        installationId: number;
+        repositoryId: number;
+    }): Promise<GithubRepository>;
+    listRepositoryFiles(input: {
+        installationId: number;
+        repositoryId: number;
+        ref: string;
+        prefix: string;
+        limit: number;
+        cursor?: string | undefined;
+    }): Promise<GithubFilePage>;
+    fetchRepositoryFile(input: {
+        installationId: number;
+        repositoryId: number;
+        ref: string;
+        path: string;
+    }): Promise<GithubFileContent>;
+    createInstallationAccessToken(input: {
+        installationId: number;
+        repositoryId: number;
+        permissions?: {
+            contents: 'read' | 'write';
+        } | undefined;
+    }): Promise<GithubInstallationAccessToken>;
+}
+export interface GithubInstallationAccessToken {
+    token: string;
+    expiresAt: Date;
+    permissions?: Record<string, 'read' | 'write' | 'admin'> | undefined;
+}
+export declare function createGithubApiClient(): GithubApiClient;
+export declare function mapGithubError<T>(operation: () => Promise<T>, notFoundReason?: 'repository-not-found' | 'installation-not-found' | 'file-not-found'): Promise<T>;
+//# sourceMappingURL=client.d.ts.map

package/dist/api/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,aAAa,CAAC;IACvB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,0BAA0B;IACzC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,qBAAqB,CAAC,KAAK,EAAE;QAC3B,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC7B,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACxC,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC5E,4BAA4B,CAAC,KAAK,EAAE;QAClC,cAAc,EAAE,MAAM,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC7B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC,aAAa,CAAC,KAAK,EAAE;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChG,mBAAmB,CAAC,KAAK,EAAE;QACzB,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC7B,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5B,mBAAmB,CAAC,KAAK,EAAE;QACzB,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,GAAG,EAAE,MAAM,CAAC;QACZ,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/B,6BAA6B,CAAC,KAAK,EAAE;QACnC,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE;YAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;SAAC,GAAG,SAAS,CAAC;KACxD,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,GAAG,SAAS,CAAC;CACtE;AAED,wBAAgB,qBAAqB,IAAI,eAAe,CAEvD;AA6TD,wBAAsB,cAAc,CAAC,CAAC,EACpC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,cAAc,GACV,sBAAsB,GACtB,wBAAwB,GACxB,gBAAyC,GAC5C,OAAO,CAAC,CAAC,CAAC,CAgCZ"}

package/dist/api/client.js

@@ -0,0 +1,306 @@
+import { Buffer } from 'node:buffer';
+import { MAX_REPOSITORY_FILE_BYTES } from '@shipfox/api-integration-core-dto';
+import ky, { HTTPError, TimeoutError } from 'ky';
+import { App, Octokit, RequestError } from 'octokit';
+import { config, normalizedGithubApiBaseUrl, normalizedGithubPrivateKey } from '#config.js';
+import { GithubIntegrationProviderError } from '#core/errors.js';
+const NEXT_PAGE_RE = /[?&]page=(\d+)/;
+const TRAILING_SLASHES_RE = /\/+$/;
+const MAX_TREE_WALK_DEPTH = 10;
+export function createGithubApiClient() {
+    return new OctokitGithubApiClient();
+}
+let OctokitGithubApiClient = class OctokitGithubApiClient {
+    async exchangeOAuthCode(code) {
+        const body = await mapGithubOAuthError(()=>ky.post('https://github.com/login/oauth/access_token', {
+                headers: {
+                    accept: 'application/json'
+                },
+                json: {
+                    client_id: config.GITHUB_APP_CLIENT_ID,
+                    client_secret: config.GITHUB_APP_CLIENT_SECRET,
+                    code
+                }
+            }).json());
+        if (typeof body.access_token !== 'string') {
+            throw new GithubIntegrationProviderError('malformed-provider-response', 'GitHub OAuth response did not include an access token');
+        }
+        return body.access_token;
+    }
+    async listUserInstallations(input) {
+        const octokit = new Octokit({
+            auth: input.userAccessToken,
+            baseUrl: normalizedGithubApiBaseUrl()
+        });
+        const page = cursorToPage(input.cursor);
+        const response = await mapGithubError(()=>octokit.request('GET /user/installations', {
+                per_page: 100,
+                page
+            }));
+        const installations = response.data.installations ?? [];
+        return {
+            installationIds: installations.map((installation)=>installation.id),
+            nextCursor: nextCursorFromLink(response.headers.link)
+        };
+    }
+    async getInstallation(installationId) {
+        const response = await mapGithubError(()=>this.getApp().octokit.rest.apps.getInstallation({
+                installation_id: installationId
+            }));
+        const data = response.data;
+        const account = data.account;
+        if (!account) {
+            throw new GithubIntegrationProviderError('malformed-provider-response', 'GitHub installation response did not include an account');
+        }
+        const login = 'login' in account ? account.login : account.slug;
+        return {
+            id: data.id,
+            account: {
+                login,
+                type: 'type' in account ? account.type : 'Enterprise'
+            },
+            repositorySelection: data.repository_selection,
+            suspendedAt: data.suspended_at ? new Date(data.suspended_at) : null,
+            htmlUrl: data.html_url,
+            raw: data
+        };
+    }
+    async listInstallationRepositories(input) {
+        const octokit = await this.getApp().getInstallationOctokit(input.installationId);
+        const page = cursorToPage(input.cursor);
+        const response = await mapGithubError(()=>octokit.rest.apps.listReposAccessibleToInstallation({
+                per_page: input.limit,
+                page
+            }));
+        return {
+            repositories: response.data.repositories.map(toGithubRepository),
+            nextCursor: nextCursorFromLink(response.headers.link)
+        };
+    }
+    async getRepository(input) {
+        const octokit = await this.getApp().getInstallationOctokit(input.installationId);
+        const response = await mapGithubError(()=>octokit.request('GET /repositories/{repository_id}', {
+                repository_id: input.repositoryId
+            }));
+        return toGithubRepository(response.data);
+    }
+    async listRepositoryFiles(input) {
+        const octokit = await this.getApp().getInstallationOctokit(input.installationId);
+        const repository = await this.getRepository({
+            installationId: input.installationId,
+            repositoryId: input.repositoryId
+        });
+        const owner = repository.ownerLogin;
+        const repo = repository.name;
+        const startPath = input.prefix.replace(TRAILING_SLASHES_RE, '');
+        const offset = input.cursor ? Number.parseInt(input.cursor, 10) : 0;
+        const start = Number.isNaN(offset) || offset < 0 ? 0 : offset;
+        const collected = [];
+        const overflowLimit = start + input.limit + 1;
+        const walk = async (path, depth)=>{
+            if (collected.length >= overflowLimit) return;
+            if (depth > MAX_TREE_WALK_DEPTH) return;
+            let data;
+            try {
+                const response = await mapGithubError(()=>octokit.rest.repos.getContent({
+                        owner,
+                        repo,
+                        path,
+                        ref: input.ref
+                    }), 'file-not-found');
+                data = response.data;
+            } catch (error) {
+                if (error instanceof GithubIntegrationProviderError && error.reason === 'file-not-found') {
+                    return;
+                }
+                throw error;
+            }
+            if (!Array.isArray(data)) {
+                if (data.type === 'file' && data.path) {
+                    collected.push({
+                        path: data.path,
+                        size: typeof data.size === 'number' ? data.size : null
+                    });
+                }
+                return;
+            }
+            const entries = [
+                ...data
+            ].sort((a, b)=>(a.path ?? '').localeCompare(b.path ?? ''));
+            for (const entry of entries){
+                if (collected.length >= overflowLimit) return;
+                if (!entry.path) continue;
+                if (entry.type === 'file') {
+                    collected.push({
+                        path: entry.path,
+                        size: typeof entry.size === 'number' ? entry.size : null
+                    });
+                } else if (entry.type === 'dir') {
+                    await walk(entry.path, depth + 1);
+                }
+            }
+        };
+        await walk(startPath, 0);
+        const sorted = collected.sort((a, b)=>a.path.localeCompare(b.path));
+        const page = sorted.slice(start, start + input.limit);
+        const consumed = start + page.length;
+        const hasMore = consumed < sorted.length;
+        return {
+            files: page,
+            nextCursor: hasMore ? String(consumed) : null
+        };
+    }
+    async fetchRepositoryFile(input) {
+        const octokit = await this.getApp().getInstallationOctokit(input.installationId);
+        const repository = await this.getRepository({
+            installationId: input.installationId,
+            repositoryId: input.repositoryId
+        });
+        const response = await mapGithubError(()=>octokit.rest.repos.getContent({
+                owner: repository.ownerLogin,
+                repo: repository.name,
+                path: input.path,
+                ref: input.ref
+            }), 'file-not-found');
+        const data = response.data;
+        if (Array.isArray(data) || data.type !== 'file') {
+            throw new GithubIntegrationProviderError('file-not-found', 'GitHub path is not a file');
+        }
+        if (data.size > MAX_REPOSITORY_FILE_BYTES) {
+            throw new GithubIntegrationProviderError('content-too-large', 'GitHub file content is larger than the supported limit');
+        }
+        if (typeof data.content !== 'string' || data.encoding !== 'base64') {
+            throw new GithubIntegrationProviderError('malformed-provider-response', 'GitHub file response did not include base64 content');
+        }
+        return {
+            path: data.path,
+            size: data.size,
+            content: Buffer.from(data.content, 'base64').toString('utf8')
+        };
+    }
+    async createInstallationAccessToken(input) {
+        const response = await mapGithubError(()=>this.getApp().octokit.rest.apps.createInstallationAccessToken({
+                installation_id: input.installationId,
+                repository_ids: [
+                    input.repositoryId
+                ],
+                permissions: input.permissions ?? {
+                    contents: 'read'
+                }
+            }));
+        if (typeof response.data.token !== 'string') {
+            throw new GithubIntegrationProviderError('malformed-provider-response', 'GitHub installation access token response did not include a token');
+        }
+        const expiresAt = new Date(response.data.expires_at);
+        if (Number.isNaN(expiresAt.getTime())) {
+            throw new GithubIntegrationProviderError('malformed-provider-response', 'GitHub installation access token response did not include a valid expiry');
+        }
+        return {
+            token: response.data.token,
+            expiresAt,
+            ...response.data.permissions === undefined ? {} : {
+                permissions: response.data.permissions
+            }
+        };
+    }
+    getApp() {
+        if (!this.app) {
+            this.app = new App({
+                appId: config.GITHUB_APP_ID,
+                privateKey: normalizedGithubPrivateKey(),
+                Octokit: Octokit.defaults({
+                    baseUrl: normalizedGithubApiBaseUrl()
+                })
+            });
+        }
+        return this.app;
+    }
+};
+async function mapGithubOAuthError(operation) {
+    try {
+        return await operation();
+    } catch (error) {
+        if (error instanceof HTTPError) {
+            if (error.response.status === 429) {
+                throw new GithubIntegrationProviderError('rate-limited', 'GitHub OAuth code exchange failed', retryAfterSecondsFromHeaders(error.response.headers));
+            }
+            if (error.response.status >= 500) {
+                throw new GithubIntegrationProviderError('provider-unavailable', 'GitHub OAuth code exchange failed');
+            }
+            throw new GithubIntegrationProviderError('access-denied', 'GitHub OAuth code exchange failed');
+        }
+        if (error instanceof TimeoutError) {
+            throw new GithubIntegrationProviderError('timeout', 'GitHub OAuth request timed out');
+        }
+        throw error;
+    }
+}
+export async function mapGithubError(operation, notFoundReason = 'repository-not-found') {
+    try {
+        return await operation();
+    } catch (error) {
+        if (error instanceof GithubIntegrationProviderError) throw error;
+        if (error instanceof RequestError) {
+            if (error.status === 404) {
+                throw new GithubIntegrationProviderError(notFoundReason, error.message);
+            }
+            if (error.status === 429 || isGithubRateLimitError(error)) {
+                throw new GithubIntegrationProviderError('rate-limited', error.message, retryAfterSeconds(error));
+            }
+            if (error.status === 401 || error.status === 403) {
+                throw new GithubIntegrationProviderError('access-denied', error.message, retryAfterSeconds(error));
+            }
+            if (error.status >= 500) {
+                throw new GithubIntegrationProviderError('provider-unavailable', error.message);
+            }
+        }
+        if (error instanceof Error && error.name === 'AbortError') {
+            throw new GithubIntegrationProviderError('timeout', 'GitHub request timed out');
+        }
+        throw error;
+    }
+}
+function isGithubRateLimitError(error) {
+    return error.status === 403 && error.response?.headers['x-ratelimit-remaining'] === '0';
+}
+function retryAfterSeconds(error) {
+    return parseRetryAfterSeconds(error.response?.headers['retry-after']);
+}
+function retryAfterSecondsFromHeaders(headers) {
+    return parseRetryAfterSeconds(headers.get('retry-after'));
+}
+function parseRetryAfterSeconds(retryAfter) {
+    if (!retryAfter) return undefined;
+    const parsed = Number.parseInt(String(retryAfter), 10);
+    return Number.isNaN(parsed) ? undefined : parsed;
+}
+function cursorToPage(cursor) {
+    if (!cursor) return 1;
+    const page = Number.parseInt(cursor, 10);
+    return Number.isNaN(page) || page < 1 ? 1 : page;
+}
+function nextCursorFromLink(link) {
+    if (!link) return null;
+    const next = link.split(',').find((part)=>part.includes('rel="next"'));
+    if (!next) return null;
+    const match = next.match(NEXT_PAGE_RE);
+    return match?.[1] ?? null;
+}
+function toGithubRepository(repository) {
+    if (!repository.default_branch || !repository.clone_url || !repository.html_url) {
+        throw new GithubIntegrationProviderError('malformed-provider-response', 'GitHub repository response is missing required fields');
+    }
+    return {
+        id: repository.id,
+        ownerLogin: repository.owner.login,
+        name: repository.name,
+        fullName: repository.full_name,
+        defaultBranch: repository.default_branch,
+        private: repository.private,
+        visibility: repository.visibility,
+        cloneUrl: repository.clone_url,
+        htmlUrl: repository.html_url
+    };
+}
+
+//# sourceMappingURL=client.js.map

package/dist/api/client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/client.ts"],"sourcesContent":["import {Buffer} from 'node:buffer';\nimport {MAX_REPOSITORY_FILE_BYTES} from '@shipfox/api-integration-core-dto';\nimport ky, {HTTPError, TimeoutError} from 'ky';\nimport {App, Octokit, RequestError} from 'octokit';\nimport {config, normalizedGithubApiBaseUrl, normalizedGithubPrivateKey} from '#config.js';\nimport {GithubIntegrationProviderError} from '#core/errors.js';\n\nconst NEXT_PAGE_RE = /[?&]page=(\\d+)/;\nconst TRAILING_SLASHES_RE = /\\/+$/;\nconst MAX_TREE_WALK_DEPTH = 10;\n\nexport interface GithubAccount {\n  login: string;\n  type: string;\n}\n\nexport interface GithubInstallationDetails {\n  id: number;\n  account: GithubAccount;\n  repositorySelection: string;\n  suspendedAt: Date | null;\n  htmlUrl: string;\n  raw: Record<string, unknown>;\n}\n\nexport interface GithubRepository {\n  id: number;\n  ownerLogin: string;\n  name: string;\n  fullName: string;\n  defaultBranch: string;\n  private: boolean;\n  visibility?: string | undefined;\n  cloneUrl: string;\n  htmlUrl: string;\n}\n\nexport interface GithubRepositoryPage {\n  repositories: GithubRepository[];\n  nextCursor: string | null;\n}\n\nexport interface GithubFileEntry {\n  path: string;\n  size: number | null;\n}\n\nexport interface GithubFilePage {\n  files: GithubFileEntry[];\n  nextCursor: string | null;\n}\n\nexport interface GithubFileContent {\n  path: string;\n  content: string;\n  size: number;\n}\n\nexport interface GithubUserInstallationPage {\n  installationIds: number[];\n  nextCursor: string | null;\n}\n\nexport interface GithubApiClient {\n  exchangeOAuthCode(code: string): Promise<string>;\n  listUserInstallations(input: {\n    userAccessToken: string;\n    cursor?: string | undefined;\n  }): Promise<GithubUserInstallationPage>;\n  getInstallation(installationId: number): Promise<GithubInstallationDetails>;\n  listInstallationRepositories(input: {\n    installationId: number;\n    limit: number;\n    cursor?: string | undefined;\n  }): Promise<GithubRepositoryPage>;\n  getRepository(input: {installationId: number; repositoryId: number}): Promise<GithubRepository>;\n  listRepositoryFiles(input: {\n    installationId: number;\n    repositoryId: number;\n    ref: string;\n    prefix: string;\n    limit: number;\n    cursor?: string | undefined;\n  }): Promise<GithubFilePage>;\n  fetchRepositoryFile(input: {\n    installationId: number;\n    repositoryId: number;\n    ref: string;\n    path: string;\n  }): Promise<GithubFileContent>;\n  createInstallationAccessToken(input: {\n    installationId: number;\n    repositoryId: number;\n    permissions?: {contents: 'read' | 'write'} | undefined;\n  }): Promise<GithubInstallationAccessToken>;\n}\n\nexport interface GithubInstallationAccessToken {\n  token: string;\n  expiresAt: Date;\n  permissions?: Record<string, 'read' | 'write' | 'admin'> | undefined;\n}\n\nexport function createGithubApiClient(): GithubApiClient {\n  return new OctokitGithubApiClient();\n}\n\nclass OctokitGithubApiClient implements GithubApiClient {\n  private app: App | undefined;\n\n  async exchangeOAuthCode(code: string): Promise<string> {\n    const body = await mapGithubOAuthError(() =>\n      ky\n        .post('https://github.com/login/oauth/access_token', {\n          headers: {accept: 'application/json'},\n          json: {\n            client_id: config.GITHUB_APP_CLIENT_ID,\n            client_secret: config.GITHUB_APP_CLIENT_SECRET,\n            code,\n          },\n        })\n        .json<{access_token?: unknown}>(),\n    );\n\n    if (typeof body.access_token !== 'string') {\n      throw new GithubIntegrationProviderError(\n        'malformed-provider-response',\n        'GitHub OAuth response did not include an access token',\n      );\n    }\n    return body.access_token;\n  }\n\n  async listUserInstallations(input: {\n    userAccessToken: string;\n    cursor?: string | undefined;\n  }): Promise<GithubUserInstallationPage> {\n    const octokit = new Octokit({\n      auth: input.userAccessToken,\n      baseUrl: normalizedGithubApiBaseUrl(),\n    });\n    const page = cursorToPage(input.cursor);\n    const response = await mapGithubError(() =>\n      octokit.request('GET /user/installations', {\n        per_page: 100,\n        page,\n      }),\n    );\n\n    const installations = response.data.installations ?? [];\n    return {\n      installationIds: installations.map((installation) => installation.id),\n      nextCursor: nextCursorFromLink(response.headers.link),\n    };\n  }\n\n  async getInstallation(installationId: number): Promise<GithubInstallationDetails> {\n    const response = await mapGithubError(() =>\n      this.getApp().octokit.rest.apps.getInstallation({installation_id: installationId}),\n    );\n    const data = response.data;\n    const account = data.account;\n    if (!account) {\n      throw new GithubIntegrationProviderError(\n        'malformed-provider-response',\n        'GitHub installation response did not include an account',\n      );\n    }\n\n    const login = 'login' in account ? account.login : account.slug;\n    return {\n      id: data.id,\n      account: {\n        login,\n        type: 'type' in account ? account.type : 'Enterprise',\n      },\n      repositorySelection: data.repository_selection,\n      suspendedAt: data.suspended_at ? new Date(data.suspended_at) : null,\n      htmlUrl: data.html_url,\n      raw: data as unknown as Record<string, unknown>,\n    };\n  }\n\n  async listInstallationRepositories(input: {\n    installationId: number;\n    limit: number;\n    cursor?: string | undefined;\n  }): Promise<GithubRepositoryPage> {\n    const octokit = await this.getApp().getInstallationOctokit(input.installationId);\n    const page = cursorToPage(input.cursor);\n    const response = await mapGithubError(() =>\n      octokit.rest.apps.listReposAccessibleToInstallation({\n        per_page: input.limit,\n        page,\n      }),\n    );\n\n    return {\n      repositories: response.data.repositories.map(toGithubRepository),\n      nextCursor: nextCursorFromLink(response.headers.link),\n    };\n  }\n\n  async getRepository(input: {\n    installationId: number;\n    repositoryId: number;\n  }): Promise<GithubRepository> {\n    const octokit = await this.getApp().getInstallationOctokit(input.installationId);\n    const response = await mapGithubError(() =>\n      octokit.request('GET /repositories/{repository_id}', {\n        repository_id: input.repositoryId,\n      }),\n    );\n\n    return toGithubRepository(response.data);\n  }\n\n  async listRepositoryFiles(input: {\n    installationId: number;\n    repositoryId: number;\n    ref: string;\n    prefix: string;\n    limit: number;\n    cursor?: string | undefined;\n  }): Promise<GithubFilePage> {\n    const octokit = await this.getApp().getInstallationOctokit(input.installationId);\n    const repository = await this.getRepository({\n      installationId: input.installationId,\n      repositoryId: input.repositoryId,\n    });\n    const owner = repository.ownerLogin;\n    const repo = repository.name;\n    const startPath = input.prefix.replace(TRAILING_SLASHES_RE, '');\n    const offset = input.cursor ? Number.parseInt(input.cursor, 10) : 0;\n    const start = Number.isNaN(offset) || offset < 0 ? 0 : offset;\n    const collected: GithubFileEntry[] = [];\n    const overflowLimit = start + input.limit + 1;\n\n    type GetContentData = Awaited<ReturnType<typeof octokit.rest.repos.getContent>>['data'];\n\n    const walk = async (path: string, depth: number): Promise<void> => {\n      if (collected.length >= overflowLimit) return;\n      if (depth > MAX_TREE_WALK_DEPTH) return;\n\n      let data: GetContentData;\n      try {\n        const response = await mapGithubError(\n          () =>\n            octokit.rest.repos.getContent({\n              owner,\n              repo,\n              path,\n              ref: input.ref,\n            }),\n          'file-not-found',\n        );\n        data = response.data;\n      } catch (error) {\n        if (error instanceof GithubIntegrationProviderError && error.reason === 'file-not-found') {\n          return;\n        }\n        throw error;\n      }\n\n      if (!Array.isArray(data)) {\n        if (data.type === 'file' && data.path) {\n          collected.push({path: data.path, size: typeof data.size === 'number' ? data.size : null});\n        }\n        return;\n      }\n\n      const entries = [...data].sort((a, b) => (a.path ?? '').localeCompare(b.path ?? ''));\n      for (const entry of entries) {\n        if (collected.length >= overflowLimit) return;\n        if (!entry.path) continue;\n        if (entry.type === 'file') {\n          collected.push({\n            path: entry.path,\n            size: typeof entry.size === 'number' ? entry.size : null,\n          });\n        } else if (entry.type === 'dir') {\n          await walk(entry.path, depth + 1);\n        }\n      }\n    };\n\n    await walk(startPath, 0);\n\n    const sorted = collected.sort((a, b) => a.path.localeCompare(b.path));\n    const page = sorted.slice(start, start + input.limit);\n    const consumed = start + page.length;\n    const hasMore = consumed < sorted.length;\n\n    return {\n      files: page,\n      nextCursor: hasMore ? String(consumed) : null,\n    };\n  }\n\n  async fetchRepositoryFile(input: {\n    installationId: number;\n    repositoryId: number;\n    ref: string;\n    path: string;\n  }): Promise<GithubFileContent> {\n    const octokit = await this.getApp().getInstallationOctokit(input.installationId);\n    const repository = await this.getRepository({\n      installationId: input.installationId,\n      repositoryId: input.repositoryId,\n    });\n    const response = await mapGithubError(\n      () =>\n        octokit.rest.repos.getContent({\n          owner: repository.ownerLogin,\n          repo: repository.name,\n          path: input.path,\n          ref: input.ref,\n        }),\n      'file-not-found',\n    );\n    const data = response.data;\n\n    if (Array.isArray(data) || data.type !== 'file') {\n      throw new GithubIntegrationProviderError('file-not-found', 'GitHub path is not a file');\n    }\n    if (data.size > MAX_REPOSITORY_FILE_BYTES) {\n      throw new GithubIntegrationProviderError(\n        'content-too-large',\n        'GitHub file content is larger than the supported limit',\n      );\n    }\n    if (typeof data.content !== 'string' || data.encoding !== 'base64') {\n      throw new GithubIntegrationProviderError(\n        'malformed-provider-response',\n        'GitHub file response did not include base64 content',\n      );\n    }\n\n    return {\n      path: data.path,\n      size: data.size,\n      content: Buffer.from(data.content, 'base64').toString('utf8'),\n    };\n  }\n\n  async createInstallationAccessToken(input: {\n    installationId: number;\n    repositoryId: number;\n    permissions?: {contents: 'read' | 'write'} | undefined;\n  }): Promise<GithubInstallationAccessToken> {\n    const response = await mapGithubError(() =>\n      this.getApp().octokit.rest.apps.createInstallationAccessToken({\n        installation_id: input.installationId,\n        repository_ids: [input.repositoryId],\n        permissions: input.permissions ?? {contents: 'read'},\n      }),\n    );\n\n    if (typeof response.data.token !== 'string') {\n      throw new GithubIntegrationProviderError(\n        'malformed-provider-response',\n        'GitHub installation access token response did not include a token',\n      );\n    }\n\n    const expiresAt = new Date(response.data.expires_at);\n    if (Number.isNaN(expiresAt.getTime())) {\n      throw new GithubIntegrationProviderError(\n        'malformed-provider-response',\n        'GitHub installation access token response did not include a valid expiry',\n      );\n    }\n\n    return {\n      token: response.data.token,\n      expiresAt,\n      ...(response.data.permissions === undefined ? {} : {permissions: response.data.permissions}),\n    };\n  }\n\n  private getApp(): App {\n    if (!this.app) {\n      this.app = new App({\n        appId: config.GITHUB_APP_ID,\n        privateKey: normalizedGithubPrivateKey(),\n        Octokit: Octokit.defaults({baseUrl: normalizedGithubApiBaseUrl()}),\n      });\n    }\n    return this.app;\n  }\n}\n\nasync function mapGithubOAuthError<T>(operation: () => Promise<T>): Promise<T> {\n  try {\n    return await operation();\n  } catch (error) {\n    if (error instanceof HTTPError) {\n      if (error.response.status === 429) {\n        throw new GithubIntegrationProviderError(\n          'rate-limited',\n          'GitHub OAuth code exchange failed',\n          retryAfterSecondsFromHeaders(error.response.headers),\n        );\n      }\n      if (error.response.status >= 500) {\n        throw new GithubIntegrationProviderError(\n          'provider-unavailable',\n          'GitHub OAuth code exchange failed',\n        );\n      }\n      throw new GithubIntegrationProviderError(\n        'access-denied',\n        'GitHub OAuth code exchange failed',\n      );\n    }\n    if (error instanceof TimeoutError) {\n      throw new GithubIntegrationProviderError('timeout', 'GitHub OAuth request timed out');\n    }\n    throw error;\n  }\n}\n\nexport async function mapGithubError<T>(\n  operation: () => Promise<T>,\n  notFoundReason:\n    | 'repository-not-found'\n    | 'installation-not-found'\n    | 'file-not-found' = 'repository-not-found',\n): Promise<T> {\n  try {\n    return await operation();\n  } catch (error) {\n    if (error instanceof GithubIntegrationProviderError) throw error;\n    if (error instanceof RequestError) {\n      if (error.status === 404) {\n        throw new GithubIntegrationProviderError(notFoundReason, error.message);\n      }\n      if (error.status === 429 || isGithubRateLimitError(error)) {\n        throw new GithubIntegrationProviderError(\n          'rate-limited',\n          error.message,\n          retryAfterSeconds(error),\n        );\n      }\n      if (error.status === 401 || error.status === 403) {\n        throw new GithubIntegrationProviderError(\n          'access-denied',\n          error.message,\n          retryAfterSeconds(error),\n        );\n      }\n      if (error.status >= 500) {\n        throw new GithubIntegrationProviderError('provider-unavailable', error.message);\n      }\n    }\n    if (error instanceof Error && error.name === 'AbortError') {\n      throw new GithubIntegrationProviderError('timeout', 'GitHub request timed out');\n    }\n    throw error;\n  }\n}\n\nfunction isGithubRateLimitError(error: RequestError): boolean {\n  return error.status === 403 && error.response?.headers['x-ratelimit-remaining'] === '0';\n}\n\nfunction retryAfterSeconds(error: RequestError): number | undefined {\n  return parseRetryAfterSeconds(error.response?.headers['retry-after']);\n}\n\nfunction retryAfterSecondsFromHeaders(headers: Headers): number | undefined {\n  return parseRetryAfterSeconds(headers.get('retry-after'));\n}\n\nfunction parseRetryAfterSeconds(\n  retryAfter: string | number | null | undefined,\n): number | undefined {\n  if (!retryAfter) return undefined;\n  const parsed = Number.parseInt(String(retryAfter), 10);\n  return Number.isNaN(parsed) ? undefined : parsed;\n}\n\nfunction cursorToPage(cursor: string | undefined): number {\n  if (!cursor) return 1;\n  const page = Number.parseInt(cursor, 10);\n  return Number.isNaN(page) || page < 1 ? 1 : page;\n}\n\nfunction nextCursorFromLink(link: string | undefined): string | null {\n  if (!link) return null;\n  const next = link.split(',').find((part) => part.includes('rel=\"next\"'));\n  if (!next) return null;\n  const match = next.match(NEXT_PAGE_RE);\n  return match?.[1] ?? null;\n}\n\nfunction toGithubRepository(repository: {\n  id: number;\n  owner: {login: string};\n  name: string;\n  full_name: string;\n  default_branch?: string | null | undefined;\n  private: boolean;\n  visibility?: string | undefined;\n  clone_url?: string | null | undefined;\n  html_url?: string | null | undefined;\n}): GithubRepository {\n  if (!repository.default_branch || !repository.clone_url || !repository.html_url) {\n    throw new GithubIntegrationProviderError(\n      'malformed-provider-response',\n      'GitHub repository response is missing required fields',\n    );\n  }\n  return {\n    id: repository.id,\n    ownerLogin: repository.owner.login,\n    name: repository.name,\n    fullName: repository.full_name,\n    defaultBranch: repository.default_branch,\n    private: repository.private,\n    visibility: repository.visibility,\n    cloneUrl: repository.clone_url,\n    htmlUrl: repository.html_url,\n  };\n}\n"],"names":["Buffer","MAX_REPOSITORY_FILE_BYTES","ky","HTTPError","TimeoutError","App","Octokit","RequestError","config","normalizedGithubApiBaseUrl","normalizedGithubPrivateKey","GithubIntegrationProviderError","NEXT_PAGE_RE","TRAILING_SLASHES_RE","MAX_TREE_WALK_DEPTH","createGithubApiClient","OctokitGithubApiClient","exchangeOAuthCode","code","body","mapGithubOAuthError","post","headers","accept","json","client_id","GITHUB_APP_CLIENT_ID","client_secret","GITHUB_APP_CLIENT_SECRET","access_token","listUserInstallations","input","octokit","auth","userAccessToken","baseUrl","page","cursorToPage","cursor","response","mapGithubError","request","per_page","installations","data","installationIds","map","installation","id","nextCursor","nextCursorFromLink","link","getInstallation","installationId","getApp","rest","apps","installation_id","account","login","slug","type","repositorySelection","repository_selection","suspendedAt","suspended_at","Date","htmlUrl","html_url","raw","listInstallationRepositories","getInstallationOctokit","listReposAccessibleToInstallation","limit","repositories","toGithubRepository","getRepository","repository_id","repositoryId","listRepositoryFiles","repository","owner","ownerLogin","repo","name","startPath","prefix","replace","offset","Number","parseInt","start","isNaN","collected","overflowLimit","walk","path","depth","length","repos","getContent","ref","error","reason","Array","isArray","push","size","entries","sort","a","b","localeCompare","entry","sorted","slice","consumed","hasMore","files","String","fetchRepositoryFile","content","encoding","from","toString","createInstallationAccessToken","repository_ids","permissions","contents","token","expiresAt","expires_at","getTime","undefined","app","appId","GITHUB_APP_ID","privateKey","defaults","operation","status","retryAfterSecondsFromHeaders","notFoundReason","message","isGithubRateLimitError","retryAfterSeconds","Error","parseRetryAfterSeconds","get","retryAfter","parsed","next","split","find","part","includes","match","default_branch","clone_url","fullName","full_name","defaultBranch","private","visibility","cloneUrl"],"mappings":"AAAA,SAAQA,MAAM,QAAO,cAAc;AACnC,SAAQC,yBAAyB,QAAO,oCAAoC;AAC5E,OAAOC,MAAKC,SAAS,EAAEC,YAAY,QAAO,KAAK;AAC/C,SAAQC,GAAG,EAAEC,OAAO,EAAEC,YAAY,QAAO,UAAU;AACnD,SAAQC,MAAM,EAAEC,0BAA0B,EAAEC,0BAA0B,QAAO,aAAa;AAC1F,SAAQC,8BAA8B,QAAO,kBAAkB;AAE/D,MAAMC,eAAe;AACrB,MAAMC,sBAAsB;AAC5B,MAAMC,sBAAsB;AA8F5B,OAAO,SAASC;IACd,OAAO,IAAIC;AACb;AAEA,IAAA,AAAMA,yBAAN,MAAMA;IAGJ,MAAMC,kBAAkBC,IAAY,EAAmB;QACrD,MAAMC,OAAO,MAAMC,oBAAoB,IACrClB,GACGmB,IAAI,CAAC,+CAA+C;gBACnDC,SAAS;oBAACC,QAAQ;gBAAkB;gBACpCC,MAAM;oBACJC,WAAWjB,OAAOkB,oBAAoB;oBACtCC,eAAenB,OAAOoB,wBAAwB;oBAC9CV;gBACF;YACF,GACCM,IAAI;QAGT,IAAI,OAAOL,KAAKU,YAAY,KAAK,UAAU;YACzC,MAAM,IAAIlB,+BACR,+BACA;QAEJ;QACA,OAAOQ,KAAKU,YAAY;IAC1B;IAEA,MAAMC,sBAAsBC,KAG3B,EAAuC;QACtC,MAAMC,UAAU,IAAI1B,QAAQ;YAC1B2B,MAAMF,MAAMG,eAAe;YAC3BC,SAAS1B;QACX;QACA,MAAM2B,OAAOC,aAAaN,MAAMO,MAAM;QACtC,MAAMC,WAAW,MAAMC,eAAe,IACpCR,QAAQS,OAAO,CAAC,2BAA2B;gBACzCC,UAAU;gBACVN;YACF;QAGF,MAAMO,gBAAgBJ,SAASK,IAAI,CAACD,aAAa,IAAI,EAAE;QACvD,OAAO;YACLE,iBAAiBF,cAAcG,GAAG,CAAC,CAACC,eAAiBA,aAAaC,EAAE;YACpEC,YAAYC,mBAAmBX,SAASjB,OAAO,CAAC6B,IAAI;QACtD;IACF;IAEA,MAAMC,gBAAgBC,cAAsB,EAAsC;QAChF,MAAMd,WAAW,MAAMC,eAAe,IACpC,IAAI,CAACc,MAAM,GAAGtB,OAAO,CAACuB,IAAI,CAACC,IAAI,CAACJ,eAAe,CAAC;gBAACK,iBAAiBJ;YAAc;QAElF,MAAMT,OAAOL,SAASK,IAAI;QAC1B,MAAMc,UAAUd,KAAKc,OAAO;QAC5B,IAAI,CAACA,SAAS;YACZ,MAAM,IAAI/C,+BACR,+BACA;QAEJ;QAEA,MAAMgD,QAAQ,WAAWD,UAAUA,QAAQC,KAAK,GAAGD,QAAQE,IAAI;QAC/D,OAAO;YACLZ,IAAIJ,KAAKI,EAAE;YACXU,SAAS;gBACPC;gBACAE,MAAM,UAAUH,UAAUA,QAAQG,IAAI,GAAG;YAC3C;YACAC,qBAAqBlB,KAAKmB,oBAAoB;YAC9CC,aAAapB,KAAKqB,YAAY,GAAG,IAAIC,KAAKtB,KAAKqB,YAAY,IAAI;YAC/DE,SAASvB,KAAKwB,QAAQ;YACtBC,KAAKzB;QACP;IACF;IAEA,MAAM0B,6BAA6BvC,KAIlC,EAAiC;QAChC,MAAMC,UAAU,MAAM,IAAI,CAACsB,MAAM,GAAGiB,sBAAsB,CAACxC,MAAMsB,cAAc;QAC/E,MAAMjB,OAAOC,aAAaN,MAAMO,MAAM;QACtC,MAAMC,WAAW,MAAMC,eAAe,IACpCR,QAAQuB,IAAI,CAACC,IAAI,CAACgB,iCAAiC,CAAC;gBAClD9B,UAAUX,MAAM0C,KAAK;gBACrBrC;YACF;QAGF,OAAO;YACLsC,cAAcnC,SAASK,IAAI,CAAC8B,YAAY,CAAC5B,GAAG,CAAC6B;YAC7C1B,YAAYC,mBAAmBX,SAASjB,OAAO,CAAC6B,IAAI;QACtD;IACF;IAEA,MAAMyB,cAAc7C,KAGnB,EAA6B;QAC5B,MAAMC,UAAU,MAAM,IAAI,CAACsB,MAAM,GAAGiB,sBAAsB,CAACxC,MAAMsB,cAAc;QAC/E,MAAMd,WAAW,MAAMC,eAAe,IACpCR,QAAQS,OAAO,CAAC,qCAAqC;gBACnDoC,eAAe9C,MAAM+C,YAAY;YACnC;QAGF,OAAOH,mBAAmBpC,SAASK,IAAI;IACzC;IAEA,MAAMmC,oBAAoBhD,KAOzB,EAA2B;QAC1B,MAAMC,UAAU,MAAM,IAAI,CAACsB,MAAM,GAAGiB,sBAAsB,CAACxC,MAAMsB,cAAc;QAC/E,MAAM2B,aAAa,MAAM,IAAI,CAACJ,aAAa,CAAC;YAC1CvB,gBAAgBtB,MAAMsB,cAAc;YACpCyB,cAAc/C,MAAM+C,YAAY;QAClC;QACA,MAAMG,QAAQD,WAAWE,UAAU;QACnC,MAAMC,OAAOH,WAAWI,IAAI;QAC5B,MAAMC,YAAYtD,MAAMuD,MAAM,CAACC,OAAO,CAAC1E,qBAAqB;QAC5D,MAAM2E,SAASzD,MAAMO,MAAM,GAAGmD,OAAOC,QAAQ,CAAC3D,MAAMO,MAAM,EAAE,MAAM;QAClE,MAAMqD,QAAQF,OAAOG,KAAK,CAACJ,WAAWA,SAAS,IAAI,IAAIA;QACvD,MAAMK,YAA+B,EAAE;QACvC,MAAMC,gBAAgBH,QAAQ5D,MAAM0C,KAAK,GAAG;QAI5C,MAAMsB,OAAO,OAAOC,MAAcC;YAChC,IAAIJ,UAAUK,MAAM,IAAIJ,eAAe;YACvC,IAAIG,QAAQnF,qBAAqB;YAEjC,IAAI8B;YACJ,IAAI;gBACF,MAAML,WAAW,MAAMC,eACrB,IACER,QAAQuB,IAAI,CAAC4C,KAAK,CAACC,UAAU,CAAC;wBAC5BnB;wBACAE;wBACAa;wBACAK,KAAKtE,MAAMsE,GAAG;oBAChB,IACF;gBAEFzD,OAAOL,SAASK,IAAI;YACtB,EAAE,OAAO0D,OAAO;gBACd,IAAIA,iBAAiB3F,kCAAkC2F,MAAMC,MAAM,KAAK,kBAAkB;oBACxF;gBACF;gBACA,MAAMD;YACR;YAEA,IAAI,CAACE,MAAMC,OAAO,CAAC7D,OAAO;gBACxB,IAAIA,KAAKiB,IAAI,KAAK,UAAUjB,KAAKoD,IAAI,EAAE;oBACrCH,UAAUa,IAAI,CAAC;wBAACV,MAAMpD,KAAKoD,IAAI;wBAAEW,MAAM,OAAO/D,KAAK+D,IAAI,KAAK,WAAW/D,KAAK+D,IAAI,GAAG;oBAAI;gBACzF;gBACA;YACF;YAEA,MAAMC,UAAU;mBAAIhE;aAAK,CAACiE,IAAI,CAAC,CAACC,GAAGC,IAAM,AAACD,CAAAA,EAAEd,IAAI,IAAI,EAAC,EAAGgB,aAAa,CAACD,EAAEf,IAAI,IAAI;YAChF,KAAK,MAAMiB,SAASL,QAAS;gBAC3B,IAAIf,UAAUK,MAAM,IAAIJ,eAAe;gBACvC,IAAI,CAACmB,MAAMjB,IAAI,EAAE;gBACjB,IAAIiB,MAAMpD,IAAI,KAAK,QAAQ;oBACzBgC,UAAUa,IAAI,CAAC;wBACbV,MAAMiB,MAAMjB,IAAI;wBAChBW,MAAM,OAAOM,MAAMN,IAAI,KAAK,WAAWM,MAAMN,IAAI,GAAG;oBACtD;gBACF,OAAO,IAAIM,MAAMpD,IAAI,KAAK,OAAO;oBAC/B,MAAMkC,KAAKkB,MAAMjB,IAAI,EAAEC,QAAQ;gBACjC;YACF;QACF;QAEA,MAAMF,KAAKV,WAAW;QAEtB,MAAM6B,SAASrB,UAAUgB,IAAI,CAAC,CAACC,GAAGC,IAAMD,EAAEd,IAAI,CAACgB,aAAa,CAACD,EAAEf,IAAI;QACnE,MAAM5D,OAAO8E,OAAOC,KAAK,CAACxB,OAAOA,QAAQ5D,MAAM0C,KAAK;QACpD,MAAM2C,WAAWzB,QAAQvD,KAAK8D,MAAM;QACpC,MAAMmB,UAAUD,WAAWF,OAAOhB,MAAM;QAExC,OAAO;YACLoB,OAAOlF;YACPa,YAAYoE,UAAUE,OAAOH,YAAY;QAC3C;IACF;IAEA,MAAMI,oBAAoBzF,KAKzB,EAA8B;QAC7B,MAAMC,UAAU,MAAM,IAAI,CAACsB,MAAM,GAAGiB,sBAAsB,CAACxC,MAAMsB,cAAc;QAC/E,MAAM2B,aAAa,MAAM,IAAI,CAACJ,aAAa,CAAC;YAC1CvB,gBAAgBtB,MAAMsB,cAAc;YACpCyB,cAAc/C,MAAM+C,YAAY;QAClC;QACA,MAAMvC,WAAW,MAAMC,eACrB,IACER,QAAQuB,IAAI,CAAC4C,KAAK,CAACC,UAAU,CAAC;gBAC5BnB,OAAOD,WAAWE,UAAU;gBAC5BC,MAAMH,WAAWI,IAAI;gBACrBY,MAAMjE,MAAMiE,IAAI;gBAChBK,KAAKtE,MAAMsE,GAAG;YAChB,IACF;QAEF,MAAMzD,OAAOL,SAASK,IAAI;QAE1B,IAAI4D,MAAMC,OAAO,CAAC7D,SAASA,KAAKiB,IAAI,KAAK,QAAQ;YAC/C,MAAM,IAAIlD,+BAA+B,kBAAkB;QAC7D;QACA,IAAIiC,KAAK+D,IAAI,GAAG1G,2BAA2B;YACzC,MAAM,IAAIU,+BACR,qBACA;QAEJ;QACA,IAAI,OAAOiC,KAAK6E,OAAO,KAAK,YAAY7E,KAAK8E,QAAQ,KAAK,UAAU;YAClE,MAAM,IAAI/G,+BACR,+BACA;QAEJ;QAEA,OAAO;YACLqF,MAAMpD,KAAKoD,IAAI;YACfW,MAAM/D,KAAK+D,IAAI;YACfc,SAASzH,OAAO2H,IAAI,CAAC/E,KAAK6E,OAAO,EAAE,UAAUG,QAAQ,CAAC;QACxD;IACF;IAEA,MAAMC,8BAA8B9F,KAInC,EAA0C;QACzC,MAAMQ,WAAW,MAAMC,eAAe,IACpC,IAAI,CAACc,MAAM,GAAGtB,OAAO,CAACuB,IAAI,CAACC,IAAI,CAACqE,6BAA6B,CAAC;gBAC5DpE,iBAAiB1B,MAAMsB,cAAc;gBACrCyE,gBAAgB;oBAAC/F,MAAM+C,YAAY;iBAAC;gBACpCiD,aAAahG,MAAMgG,WAAW,IAAI;oBAACC,UAAU;gBAAM;YACrD;QAGF,IAAI,OAAOzF,SAASK,IAAI,CAACqF,KAAK,KAAK,UAAU;YAC3C,MAAM,IAAItH,+BACR,+BACA;QAEJ;QAEA,MAAMuH,YAAY,IAAIhE,KAAK3B,SAASK,IAAI,CAACuF,UAAU;QACnD,IAAI1C,OAAOG,KAAK,CAACsC,UAAUE,OAAO,KAAK;YACrC,MAAM,IAAIzH,+BACR,+BACA;QAEJ;QAEA,OAAO;YACLsH,OAAO1F,SAASK,IAAI,CAACqF,KAAK;YAC1BC;YACA,GAAI3F,SAASK,IAAI,CAACmF,WAAW,KAAKM,YAAY,CAAC,IAAI;gBAACN,aAAaxF,SAASK,IAAI,CAACmF,WAAW;YAAA,CAAC;QAC7F;IACF;IAEQzE,SAAc;QACpB,IAAI,CAAC,IAAI,CAACgF,GAAG,EAAE;YACb,IAAI,CAACA,GAAG,GAAG,IAAIjI,IAAI;gBACjBkI,OAAO/H,OAAOgI,aAAa;gBAC3BC,YAAY/H;gBACZJ,SAASA,QAAQoI,QAAQ,CAAC;oBAACvG,SAAS1B;gBAA4B;YAClE;QACF;QACA,OAAO,IAAI,CAAC6H,GAAG;IACjB;AACF;AAEA,eAAelH,oBAAuBuH,SAA2B;IAC/D,IAAI;QACF,OAAO,MAAMA;IACf,EAAE,OAAOrC,OAAO;QACd,IAAIA,iBAAiBnG,WAAW;YAC9B,IAAImG,MAAM/D,QAAQ,CAACqG,MAAM,KAAK,KAAK;gBACjC,MAAM,IAAIjI,+BACR,gBACA,qCACAkI,6BAA6BvC,MAAM/D,QAAQ,CAACjB,OAAO;YAEvD;YACA,IAAIgF,MAAM/D,QAAQ,CAACqG,MAAM,IAAI,KAAK;gBAChC,MAAM,IAAIjI,+BACR,wBACA;YAEJ;YACA,MAAM,IAAIA,+BACR,iBACA;QAEJ;QACA,IAAI2F,iBAAiBlG,cAAc;YACjC,MAAM,IAAIO,+BAA+B,WAAW;QACtD;QACA,MAAM2F;IACR;AACF;AAEA,OAAO,eAAe9D,eACpBmG,SAA2B,EAC3BG,iBAGuB,sBAAsB;IAE7C,IAAI;QACF,OAAO,MAAMH;IACf,EAAE,OAAOrC,OAAO;QACd,IAAIA,iBAAiB3F,gCAAgC,MAAM2F;QAC3D,IAAIA,iBAAiB/F,cAAc;YACjC,IAAI+F,MAAMsC,MAAM,KAAK,KAAK;gBACxB,MAAM,IAAIjI,+BAA+BmI,gBAAgBxC,MAAMyC,OAAO;YACxE;YACA,IAAIzC,MAAMsC,MAAM,KAAK,OAAOI,uBAAuB1C,QAAQ;gBACzD,MAAM,IAAI3F,+BACR,gBACA2F,MAAMyC,OAAO,EACbE,kBAAkB3C;YAEtB;YACA,IAAIA,MAAMsC,MAAM,KAAK,OAAOtC,MAAMsC,MAAM,KAAK,KAAK;gBAChD,MAAM,IAAIjI,+BACR,iBACA2F,MAAMyC,OAAO,EACbE,kBAAkB3C;YAEtB;YACA,IAAIA,MAAMsC,MAAM,IAAI,KAAK;gBACvB,MAAM,IAAIjI,+BAA+B,wBAAwB2F,MAAMyC,OAAO;YAChF;QACF;QACA,IAAIzC,iBAAiB4C,SAAS5C,MAAMlB,IAAI,KAAK,cAAc;YACzD,MAAM,IAAIzE,+BAA+B,WAAW;QACtD;QACA,MAAM2F;IACR;AACF;AAEA,SAAS0C,uBAAuB1C,KAAmB;IACjD,OAAOA,MAAMsC,MAAM,KAAK,OAAOtC,MAAM/D,QAAQ,EAAEjB,OAAO,CAAC,wBAAwB,KAAK;AACtF;AAEA,SAAS2H,kBAAkB3C,KAAmB;IAC5C,OAAO6C,uBAAuB7C,MAAM/D,QAAQ,EAAEjB,OAAO,CAAC,cAAc;AACtE;AAEA,SAASuH,6BAA6BvH,OAAgB;IACpD,OAAO6H,uBAAuB7H,QAAQ8H,GAAG,CAAC;AAC5C;AAEA,SAASD,uBACPE,UAA8C;IAE9C,IAAI,CAACA,YAAY,OAAOhB;IACxB,MAAMiB,SAAS7D,OAAOC,QAAQ,CAAC6B,OAAO8B,aAAa;IACnD,OAAO5D,OAAOG,KAAK,CAAC0D,UAAUjB,YAAYiB;AAC5C;AAEA,SAASjH,aAAaC,MAA0B;IAC9C,IAAI,CAACA,QAAQ,OAAO;IACpB,MAAMF,OAAOqD,OAAOC,QAAQ,CAACpD,QAAQ;IACrC,OAAOmD,OAAOG,KAAK,CAACxD,SAASA,OAAO,IAAI,IAAIA;AAC9C;AAEA,SAASc,mBAAmBC,IAAwB;IAClD,IAAI,CAACA,MAAM,OAAO;IAClB,MAAMoG,OAAOpG,KAAKqG,KAAK,CAAC,KAAKC,IAAI,CAAC,CAACC,OAASA,KAAKC,QAAQ,CAAC;IAC1D,IAAI,CAACJ,MAAM,OAAO;IAClB,MAAMK,QAAQL,KAAKK,KAAK,CAAChJ;IACzB,OAAOgJ,OAAO,CAAC,EAAE,IAAI;AACvB;AAEA,SAASjF,mBAAmBK,UAU3B;IACC,IAAI,CAACA,WAAW6E,cAAc,IAAI,CAAC7E,WAAW8E,SAAS,IAAI,CAAC9E,WAAWZ,QAAQ,EAAE;QAC/E,MAAM,IAAIzD,+BACR,+BACA;IAEJ;IACA,OAAO;QACLqC,IAAIgC,WAAWhC,EAAE;QACjBkC,YAAYF,WAAWC,KAAK,CAACtB,KAAK;QAClCyB,MAAMJ,WAAWI,IAAI;QACrB2E,UAAU/E,WAAWgF,SAAS;QAC9BC,eAAejF,WAAW6E,cAAc;QACxCK,SAASlF,WAAWkF,OAAO;QAC3BC,YAAYnF,WAAWmF,UAAU;QACjCC,UAAUpF,WAAW8E,SAAS;QAC9B3F,SAASa,WAAWZ,QAAQ;IAC9B;AACF"}