@shipfox/api-integration-github 2.0.0

package/drizzle/0000_initial.sql

@@ -0,0 +1,17 @@
+CREATE TABLE "integrations_github_installations" (
+	"id" uuid PRIMARY KEY DEFAULT uuidv7() NOT NULL,
+	"connection_id" uuid NOT NULL,
+	"installation_id" text NOT NULL,
+	"account_login" text NOT NULL,
+	"account_type" text NOT NULL,
+	"repository_selection" text NOT NULL,
+	"suspended_at" timestamp with time zone,
+	"deleted_at" timestamp with time zone,
+	"latest_event" jsonb NOT NULL,
+	"installer_user_id" uuid,
+	"created_at" timestamp with time zone DEFAULT now() NOT NULL,
+	"updated_at" timestamp with time zone DEFAULT now() NOT NULL
+);
+--> statement-breakpoint
+CREATE UNIQUE INDEX "integrations_github_installations_connection_unique" ON "integrations_github_installations" USING btree ("connection_id");--> statement-breakpoint
+CREATE UNIQUE INDEX "integrations_github_installations_installation_unique" ON "integrations_github_installations" USING btree ("installation_id");

package/drizzle/meta/_journal.json

@@ -0,0 +1,13 @@
+{
+  "version": "7",
+  "dialect": "postgresql",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "7",
+      "when": 1777541400000,
+      "tag": "0000_initial",
+      "breakpoints": true
+    }
+  ]
+}

package/drizzle.config.ts

@@ -0,0 +1,7 @@
+import {defineConfig} from 'drizzle-kit';
+
+export default defineConfig({
+  schema: './src/db/schema/*.ts',
+  out: './drizzle',
+  dialect: 'postgresql',
+});

package/package.json

@@ -0,0 +1,71 @@
+{
+  "name": "@shipfox/api-integration-github",
+  "license": "MIT",
+  "version": "2.0.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ShipfoxHQ/shipfox.git",
+    "directory": "libs/api/integration/github"
+  },
+  "private": false,
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "imports": {
+    "#test/*": "./test/*",
+    "#*": {
+      "workspace-source": "./src/*",
+      "development": "./src/*",
+      "default": "./dist/*"
+    }
+  },
+  "exports": {
+    ".": {
+      "development": {
+        "types": "./src/index.ts",
+        "default": "./src/index.ts"
+      },
+      "default": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      }
+    }
+  },
+  "dependencies": {
+    "@octokit/webhooks": "^14.2.0",
+    "drizzle-orm": "^0.45.2",
+    "ky": "^2.0.0",
+    "octokit": "^5.0.3",
+    "zod": "^4.4.3",
+    "@shipfox/api-auth-context": "2.0.0",
+    "@shipfox/api-integration-core-dto": "2.0.0",
+    "@shipfox/api-workspaces": "2.0.0",
+    "@shipfox/api-integration-github-dto": "2.0.0",
+    "@shipfox/config": "1.2.1",
+    "@shipfox/node-fastify": "0.2.1",
+    "@shipfox/node-drizzle": "0.2.1",
+    "@shipfox/node-postgres": "0.4.1",
+    "@shipfox/node-opentelemetry": "0.5.0"
+  },
+  "devDependencies": {
+    "@types/pg": "^8.15.5",
+    "drizzle-kit": "^0.31.10",
+    "fastify": "^5.3.3",
+    "fastify-type-provider-zod": "^6.0.0",
+    "fishery": "^2.2.2",
+    "@shipfox/typescript": "1.1.6",
+    "@shipfox/ts-config": "1.3.8",
+    "@shipfox/biome": "1.8.1",
+    "@shipfox/swc": "1.2.5",
+    "@shipfox/vitest": "1.2.2"
+  },
+  "scripts": {
+    "build": "shipfox-swc",
+    "check": "shipfox-biome-check",
+    "check:fix": "shipfox-biome-check --write",
+    "test": "shipfox-vitest-run",
+    "test:watch": "shipfox-vitest-watch",
+    "type": "shipfox-tsc-check",
+    "type:emit": "shipfox-tsc-emit"
+  }
+}

package/src/api/client.test.ts

@@ -0,0 +1,94 @@
+import {GithubIntegrationProviderError} from '#core/errors.js';
+import {createGithubApiClient} from './client.js';
+
+const {createInstallationAccessTokenMock} = vi.hoisted(() => ({
+  createInstallationAccessTokenMock: vi.fn(),
+}));
+
+vi.mock('octokit', () => ({
+  App: class App {
+    octokit = {
+      rest: {apps: {createInstallationAccessToken: createInstallationAccessTokenMock}},
+    };
+  },
+  Octokit: {
+    defaults(options: unknown) {
+      return {defaults: options};
+    },
+  },
+  RequestError: class RequestError extends Error {},
+}));
+
+describe('OctokitGithubApiClient.createInstallationAccessToken', () => {
+  beforeEach(() => {
+    createInstallationAccessTokenMock.mockReset();
+  });
+
+  it('mints a repository-scoped, read-only installation token', async () => {
+    createInstallationAccessTokenMock.mockResolvedValue({
+      data: {token: 'ghs_installationtoken', expires_at: '2026-06-10T12:00:00.000Z'},
+    });
+    const client = createGithubApiClient();
+
+    const result = await client.createInstallationAccessToken({
+      installationId: 1,
+      repositoryId: 42,
+    });
+
+    expect(result).toEqual({
+      token: 'ghs_installationtoken',
+      expiresAt: new Date('2026-06-10T12:00:00.000Z'),
+    });
+    expect(createInstallationAccessTokenMock).toHaveBeenCalledWith({
+      installation_id: 1,
+      repository_ids: [42],
+      permissions: {contents: 'read'},
+    });
+  });
+
+  it('mints a repository-scoped write installation token when requested', async () => {
+    createInstallationAccessTokenMock.mockResolvedValue({
+      data: {token: 'ghs_installationtoken', expires_at: '2026-06-10T12:00:00.000Z'},
+    });
+    const client = createGithubApiClient();
+
+    await client.createInstallationAccessToken({
+      installationId: 1,
+      repositoryId: 42,
+      permissions: {contents: 'write'},
+    });
+
+    expect(createInstallationAccessTokenMock).toHaveBeenCalledWith({
+      installation_id: 1,
+      repository_ids: [42],
+      permissions: {contents: 'write'},
+    });
+  });
+
+  it('rejects a response without a token', async () => {
+    createInstallationAccessTokenMock.mockResolvedValue({
+      data: {expires_at: '2026-06-10T12:00:00.000Z'},
+    });
+    const client = createGithubApiClient();
+
+    const result = client.createInstallationAccessToken({installationId: 1, repositoryId: 42});
+
+    await expect(result).rejects.toMatchObject({
+      reason: 'malformed-provider-response',
+    });
+    await expect(result).rejects.toBeInstanceOf(GithubIntegrationProviderError);
+  });
+
+  it('rejects a response with a missing or unparseable expiry', async () => {
+    createInstallationAccessTokenMock.mockResolvedValue({
+      data: {token: 'ghs_installationtoken'},
+    });
+    const client = createGithubApiClient();
+
+    const result = client.createInstallationAccessToken({installationId: 1, repositoryId: 42});
+
+    await expect(result).rejects.toMatchObject({
+      reason: 'malformed-provider-response',
+    });
+  });
+});